Analysis

  • max time kernel
    155s
  • max time network
    165s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-10-2023 13:11

General

  • Target

    9df1ccbf3fc987af54dd03b3cb56da0460100b489412d3de2a886dca58ba4340.exe

  • Size

    4.6MB

  • MD5

    f8400f678df52f291bb5353771c6b2b8

  • SHA1

    eb43ce50b2b734e6de7c4e5bed06675ca4c04dd0

  • SHA256

    9df1ccbf3fc987af54dd03b3cb56da0460100b489412d3de2a886dca58ba4340

  • SHA512

    6aac544d4beb5e85f9378bab551624dd969fc41b4218af78e3aa508acec06feaeae50fca3b217d9635f096b22624f1f297fec7390f7400b26f62c3a3991fd884

  • SSDEEP

    98304:6aVizMvkMUg3n5xmtDasmlKdzOJDb4v+:+MsR39wN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9df1ccbf3fc987af54dd03b3cb56da0460100b489412d3de2a886dca58ba4340.exe
    "C:\Users\Admin\AppData\Local\Temp\9df1ccbf3fc987af54dd03b3cb56da0460100b489412d3de2a886dca58ba4340.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3164

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    3KB

    MD5

    902cbfec6a58185d7b7607b795d9ea5f

    SHA1

    4b5a7173f59c4535b1f64a181c2630b42cc42220

    SHA256

    7a19ceb4d9901e796dea1e11009212c99bb9bd7a5026deb4a1cd6dee5ce4caf0

    SHA512

    f8ab0062c53e909597702ab5f81cd90fb625544375fd09da5b60bf0c7bb00df2511fd661350803b9a3845bc1378de2b30ee3413993c89461f08da3ca71fa398b

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    6KB

    MD5

    e651661c6320ce5502ba0f0dbc567967

    SHA1

    91eaffabe32eacaf966c499f1167db8b9219f559

    SHA256

    7e4e77e3f71a0d43210149f0f209be8cce78c3f2c1590f8854fc160869b4f63b

    SHA512

    37d0cb86d2dfb658d2c5ef5128b076a409560fe8167112aab463d77cc745b9a78ebc2e3c1031f3c94fd5da6663009e8c64f1358db56ac99d4cb9c3616609384a

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    52482344d007a00bbca2489f0a4743d5

    SHA1

    1df9d5d5ef31175cc58414743e8754af0efe9284

    SHA256

    1aaee36b5b39e6201cba2b1aa34fd550a3e3c44db72218495e450b95dda2030a

    SHA512

    5eb5916627f96d0e0fa6dcc50e037f0c16e5ad0296e7a6dbab1bba8aa88cd99568d779dfdef2feae6d09d3266419f2902caa3eac7ca870090579bbdea04a2aa1