Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/10/2023, 18:29

General

  • Target

    5a1d89e89f02501eb7b4a3b618537116fd3373ab3c240e371cd4d471f6e403c0.exe

  • Size

    4.8MB

  • MD5

    329b0ee4d0069e9da6594506c1b34ca1

  • SHA1

    14885c486290d5177f9ea0761fa33e8805107bdd

  • SHA256

    5a1d89e89f02501eb7b4a3b618537116fd3373ab3c240e371cd4d471f6e403c0

  • SHA512

    c3191b515157787ffa9144c9d28c1d8208671eb201e129da876d594de059a8f4b1ae01546e16c72717d38494c55a9b4c14711d066c61d534a2e1de1a51bb1072

  • SSDEEP

    98304:7TVlYQiFIUueAAu2PkcCO3LUKdzOJDb4v+es:NlY02PkcFwN0v+es

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5a1d89e89f02501eb7b4a3b618537116fd3373ab3c240e371cd4d471f6e403c0.exe
    "C:\Users\Admin\AppData\Local\Temp\5a1d89e89f02501eb7b4a3b618537116fd3373ab3c240e371cd4d471f6e403c0.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    48018a9559d51e4956ca6192c72d3130

    SHA1

    58cfcb245b401435fd9ce866a561e74ab68bed39

    SHA256

    c1c26d6e188f0f08008c38bec7b9e9b6dafb14d3040a49fb1e98ca2a0c7cb768

    SHA512

    603056c409a60845d66d978ab22e0200aa6b08ff36c4c59057f45a6a411c633c5cf54e97c03de1a0f38fe15b3daa610a680b6a29dae3b5f2850d0d65d1cd7c19

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    76ce9d7b35351f2d6bba8f86b58bf476

    SHA1

    ac876576b6efd676b024b450088c7a345fabbfa9

    SHA256

    bc4d7539274740b3f3f59062cb8eb912102c7cb5a8141511fe46d81201084a0a

    SHA512

    d39a27be30223370647d0f493cebb570a09a45c43999c3c0b0637aedddaa57cf352cba9086cd877fb7671950ad864007bbab1df3214ed8c098a267418b18a4e5