Analysis

  • max time kernel
    126s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-10-2023 21:47

General

  • Target

    9e5ac33ef8a3c4040fa57b0517c21a4e64c6e51c2e1028fe4b42ef4a78cb1914.exe

  • Size

    4.8MB

  • MD5

    e107ff5a796e5b921955288b6ef68308

  • SHA1

    e363866bb1eeb2044ccbb2d8c70c140d148ad09e

  • SHA256

    9e5ac33ef8a3c4040fa57b0517c21a4e64c6e51c2e1028fe4b42ef4a78cb1914

  • SHA512

    bf4c05858ee7b7a316f8bcf17b6296feafaa8a88ce04358d6f90cb67728e84f1e01ed89037c049ce5b9e5e2fc8c9be2942ee6424fe257b2d2b9eece0076ca5e6

  • SSDEEP

    98304:7TVlYQiFIUueAAu2PkcCO3LUKdzOJDb4v+es:NlY02PkcFwN0v+es

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9e5ac33ef8a3c4040fa57b0517c21a4e64c6e51c2e1028fe4b42ef4a78cb1914.exe
    "C:\Users\Admin\AppData\Local\Temp\9e5ac33ef8a3c4040fa57b0517c21a4e64c6e51c2e1028fe4b42ef4a78cb1914.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    6b198e9752b99eb0d034abb61d47f699

    SHA1

    d98b872eaabcf71f1c81ef790500820556188708

    SHA256

    9d7e783977c2e7e4321cc933105874ff9936360f92d707f5b34ae8c28dad6e18

    SHA512

    86672dc8fb15fddf77a3413e19145537533c7724c2f873bfa47e3720ec6b31c99ab9020d0e4401bb30148c49ec2be166d323cbb44c0869c624b1dee42d37a70b

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    2fb7f0b6470bab48ad195023ff72d0d8

    SHA1

    0106ef76744a607b85e95e7fec1d7fde1108d123

    SHA256

    83d222102b29707a887d981c6f6e84acdb3b4f0ebb146ce19f118529abaae3ad

    SHA512

    303a650dd9b944cfbc8b75e56f7d14a19e524c39cfaecb6a6d2ddaecf110386565adfc4338c4b5c374393bd380ed74e8c2bf9656c4fa1f0bafe853c51d05420f

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    6b198e9752b99eb0d034abb61d47f699

    SHA1

    d98b872eaabcf71f1c81ef790500820556188708

    SHA256

    9d7e783977c2e7e4321cc933105874ff9936360f92d707f5b34ae8c28dad6e18

    SHA512

    86672dc8fb15fddf77a3413e19145537533c7724c2f873bfa47e3720ec6b31c99ab9020d0e4401bb30148c49ec2be166d323cbb44c0869c624b1dee42d37a70b

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    4ff1bbdb3dc6820343f2d0a27024460d

    SHA1

    9f24016b087f86dd977f4cf903887bacbf50cdb9

    SHA256

    e7c0432c627320e3853fae3d8627b61bb5cf52e4332ce2d6ba490048373bb7ee

    SHA512

    951db3fcc9bb06460efff8f5f8475b013003802787a2b913b0d605212d8e6de8e7f424825af4199a83679e19ef18a38e59b1d43a51c8c73b6fee85c397b1cc76