Analysis
-
max time kernel
150s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
13-10-2023 13:14
Static task
static1
Behavioral task
behavioral1
Sample
064269a49c5bc8cab5eb57c14b3d48bfa911c8b5c79e4b66aae5af36d8be1b5a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
064269a49c5bc8cab5eb57c14b3d48bfa911c8b5c79e4b66aae5af36d8be1b5a.exe
Resource
win10v2004-20230915-en
General
-
Target
064269a49c5bc8cab5eb57c14b3d48bfa911c8b5c79e4b66aae5af36d8be1b5a.exe
-
Size
4.1MB
-
MD5
17a4271783ed6bacd7ef4420738f046d
-
SHA1
54ff17bd46acdc2bc9dd57f14638cbce8886603d
-
SHA256
064269a49c5bc8cab5eb57c14b3d48bfa911c8b5c79e4b66aae5af36d8be1b5a
-
SHA512
6b7398d27c35e305bdd2817afe72722e1a90a74de5285ec28753a2a79a214fcb2a40bbe7d6053ec95a59e0dea76e8198449767e2b1ca153ebabfc79bcc3fdea4
-
SSDEEP
49152:fDnaVVMzMvkMUzM3n5x/Cl+OebY+r5u8QeKxFOJxdb4vZKV:LaVizMvkMUg3n5x3KdzOJDb4v+
Malware Config
Signatures
-
Downloads MZ/PE file
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
064269a49c5bc8cab5eb57c14b3d48bfa911c8b5c79e4b66aae5af36d8be1b5a.exepid process 3348 064269a49c5bc8cab5eb57c14b3d48bfa911c8b5c79e4b66aae5af36d8be1b5a.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\lite_installer.logFilesize
1KB
MD554e56aedf14271b9fe1641b62008b3c5
SHA12f4a2d4c2849dd6b7e578170ece79279e53d90e1
SHA256494bee41471bfe4d98f8b42b624553239110e527b072608b8920a7daafb3f349
SHA512ca569cfb77880c2c95ddc2f12150a440c9868cc4e1c59ac79ad74b48cd1a574756683da8a9d584db72eb3d43e95b59fe8fc18bfd365ebbfb4ea129bc2951f902
-
C:\Users\Admin\AppData\Local\Temp\lite_installer.logFilesize
5KB
MD532edebc22cc24fa8ca532b05c66afc89
SHA110a1f5f5220b099f0d75d0ba47d7e9e49e3260fd
SHA256bd44a8d44ee5748d7918c57c87fc1ebf1e7a13db03ad2862c2a3e727b94adfc5
SHA51298bd3ab4f44c8da1027ba1c6040a8e2de324cc640c64ee481cfd9cca3588cac0f5a1ef123d008a75404a67a4329cb71447560fa8c7d8699ac3a83c241cd7db7f
-
C:\Users\Admin\AppData\Roaming\Yandex\uiFilesize
38B
MD5e3e63dbda9d152b529084858d391b36c
SHA1fdc5dbc7748181e86c96eeaed8efedde27d114fc
SHA256d7fbfaa336149847a7c2ce9da9b90d0f4879b6fc7b68df83e94ebc3148c8f914
SHA51209e67ab7289720bc6e46569a4e659ae288f4b70668fa89a34487a08832a0dad6959516b8909eef4d50f15d6b0d330da2851f92a943ef58097ac6fb1a3e989a59