Analysis

  • max time kernel
    172s
  • max time network
    180s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 19:52

General

  • Target

    087710be758d0bbce27a82172d843beab86a850a2f20214fa28b0c4360915409.exe

  • Size

    4.1MB

  • MD5

    91a9a71ce5455588685a94923c607022

  • SHA1

    9d2146bc7a339663683094230c0334fa937b8017

  • SHA256

    087710be758d0bbce27a82172d843beab86a850a2f20214fa28b0c4360915409

  • SHA512

    d3c597767eac35670872eca3d453f3e84bb1f067cf64633f79255bb9e23a93351da65615ca8317fcf536d53f3dc180bba99357e6e1d889641709187b745bc525

  • SSDEEP

    49152:XDnaVVMzMvkMUzM3n5xlekY+r5u8QeKxFOJxdb4vZKV:DaVizMvkMUg3n5xRKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\087710be758d0bbce27a82172d843beab86a850a2f20214fa28b0c4360915409.exe
    "C:\Users\Admin\AppData\Local\Temp\087710be758d0bbce27a82172d843beab86a850a2f20214fa28b0c4360915409.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4860

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          5KB

          MD5

          2b7abbc78c298d11e0c0c60167be290d

          SHA1

          aabbec5a358e478216dfbd4d535ced71aaf891ec

          SHA256

          673b7fe24b8bb7f091bbe81850572ab3c42ed900728f1a33315265cd0832e655

          SHA512

          8a037cb0bc20fb4ee1909145b6423c424ead1463a68176688d5aca2a0540e9068bf665faae2bf787e4bfd23d479dd6413616458dfb4116d5020a31082463d9e8

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          c502cbd7ed13b907f7259621aeb98ca9

          SHA1

          834d0fdbe56ea0b87cd3f15ea641d7e567e08b26

          SHA256

          65e201bb468668f940ff36a260f7ca3b3d1ee76e334ea87e7c019a37b2585ab4

          SHA512

          877546d442668019fe3d7d40dafb70bdcdd979871cb616d9f7bf11200fa75f50d88110eb8ecfff1a1cbb2ccd8620b61e2de56588ee7c1dc45f2f51ce50657549