Analysis

  • max time kernel
    140s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/10/2023, 18:31

General

  • Target

    4132bf7a2cd12a63d11c307413ff4b801cfef1389a777e76dc9e1d35964939c1.exe

  • Size

    4.8MB

  • MD5

    558213425ae3e5ddb622987e29dbaf93

  • SHA1

    ceeacabe40eaef496b692c2d18638024135c3e21

  • SHA256

    4132bf7a2cd12a63d11c307413ff4b801cfef1389a777e76dc9e1d35964939c1

  • SHA512

    0bef95e653bdfa883eb964cc95b72de1d7767089e35a31f1f4cf22eaedd66f0b6a5c988824e65da3d5c0ef02659efa8f71723584ead6ebb24f9f8c351936c8c7

  • SSDEEP

    98304:7TVlYQiFIUueAAu2PkcCO3LUKdzOJDb4v+es:NlY02PkcFwN0v+es

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4132bf7a2cd12a63d11c307413ff4b801cfef1389a777e76dc9e1d35964939c1.exe
    "C:\Users\Admin\AppData\Local\Temp\4132bf7a2cd12a63d11c307413ff4b801cfef1389a777e76dc9e1d35964939c1.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    54e23588e194cf005df92d5d1a407e5f

    SHA1

    591b4138007b05d56ba6c17ed4dae4ea7c9ff7c5

    SHA256

    390519aee5b424ba526d9392b6a94470968589acb98d19d7aa1fc2b92c9e830c

    SHA512

    282d857efa7b64abec4dcb549d16875dd3e0b9341a1ddefc7d2e42935ecd413aa418c7bab1623a73c6501f758d42082ff1c3f3cde13271c50ba07fbfba1ea57e

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    ec67a63de7ae5f50e2880074abbfe848

    SHA1

    7ddd5e5edd88629a0aafab0ab6090c6181a4c754

    SHA256

    7313266783bca3eba6f8821912f9cc0b721d52ca9b5816ed4c361b86ce7d36ac

    SHA512

    faf0aa4afb792122f1ca04749a1610cade622b66a28068defdc582ae06faf34a9845ca9fca508311d3108913b2fc634565a6ced7d45eb2884cc2bb5dde15a3cc

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    0ab3b6dd96782e69e7c973ff69635923

    SHA1

    0bfe9321f1086b7272c9fe22d85a62ad7eb1f9e7

    SHA256

    e4c277dacc772338233e1dea42612fc6c8af1118e7011ae8b93483c1166e93aa

    SHA512

    b6f03c33c962c273a39647f7ec6278057602987179428de10b5fd8ec476e4f012a0b985f74a2226219a3e70ff5ba2e9c24e162f27f786a24f143e80accc12095

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    c77da17766d35a7573cb2a937512913a

    SHA1

    f8985b102ba291aee2270949b02503031bc80cc7

    SHA256

    7961c7574532188cc38eec5768425a5e8327bb7c2670e9f51dd99fd5c2a477d1

    SHA512

    fe471d2d46c469ae7c606c257c2614f16b7a624cfef32dd61cd2beb49a5cd6cf10409cd981dc31f1a520ffd404b7d385cf484a60215ce0cc05a0606e56fa9220