Analysis

  • max time kernel
    150s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-10-2023 13:14

General

  • Target

    064269a49c5bc8cab5eb57c14b3d48bfa911c8b5c79e4b66aae5af36d8be1b5a.exe

  • Size

    4.1MB

  • MD5

    17a4271783ed6bacd7ef4420738f046d

  • SHA1

    54ff17bd46acdc2bc9dd57f14638cbce8886603d

  • SHA256

    064269a49c5bc8cab5eb57c14b3d48bfa911c8b5c79e4b66aae5af36d8be1b5a

  • SHA512

    6b7398d27c35e305bdd2817afe72722e1a90a74de5285ec28753a2a79a214fcb2a40bbe7d6053ec95a59e0dea76e8198449767e2b1ca153ebabfc79bcc3fdea4

  • SSDEEP

    49152:fDnaVVMzMvkMUzM3n5x/Cl+OebY+r5u8QeKxFOJxdb4vZKV:LaVizMvkMUg3n5x3KdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\064269a49c5bc8cab5eb57c14b3d48bfa911c8b5c79e4b66aae5af36d8be1b5a.exe
    "C:\Users\Admin\AppData\Local\Temp\064269a49c5bc8cab5eb57c14b3d48bfa911c8b5c79e4b66aae5af36d8be1b5a.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    1KB

    MD5

    54e56aedf14271b9fe1641b62008b3c5

    SHA1

    2f4a2d4c2849dd6b7e578170ece79279e53d90e1

    SHA256

    494bee41471bfe4d98f8b42b624553239110e527b072608b8920a7daafb3f349

    SHA512

    ca569cfb77880c2c95ddc2f12150a440c9868cc4e1c59ac79ad74b48cd1a574756683da8a9d584db72eb3d43e95b59fe8fc18bfd365ebbfb4ea129bc2951f902

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    5KB

    MD5

    32edebc22cc24fa8ca532b05c66afc89

    SHA1

    10a1f5f5220b099f0d75d0ba47d7e9e49e3260fd

    SHA256

    bd44a8d44ee5748d7918c57c87fc1ebf1e7a13db03ad2862c2a3e727b94adfc5

    SHA512

    98bd3ab4f44c8da1027ba1c6040a8e2de324cc640c64ee481cfd9cca3588cac0f5a1ef123d008a75404a67a4329cb71447560fa8c7d8699ac3a83c241cd7db7f

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    e3e63dbda9d152b529084858d391b36c

    SHA1

    fdc5dbc7748181e86c96eeaed8efedde27d114fc

    SHA256

    d7fbfaa336149847a7c2ce9da9b90d0f4879b6fc7b68df83e94ebc3148c8f914

    SHA512

    09e67ab7289720bc6e46569a4e659ae288f4b70668fa89a34487a08832a0dad6959516b8909eef4d50f15d6b0d330da2851f92a943ef58097ac6fb1a3e989a59