Analysis

  • max time kernel
    142s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2023, 11:31

General

  • Target

    1f211e44ffcad6b1630a962b7e440c434d950c510968dbc119bfe3cf1b8ec103.exe

  • Size

    4.8MB

  • MD5

    8811a8d900cade9782c56d34f7a78e32

  • SHA1

    51ca25f913e07bef669adac3af7891fcd19fe66b

  • SHA256

    1f211e44ffcad6b1630a962b7e440c434d950c510968dbc119bfe3cf1b8ec103

  • SHA512

    8966bd84acf73a7b4837637461723259d514f555501079c33d62bd7861f526c69b4fa8100ea6de5b049cd16bb2ba6cd74cf2aa31789b299b4224772b78a4a5ac

  • SSDEEP

    98304:7TVlYQiFIUueAAu2PkcCO3LUKdzOJDb4v+es:NlY02PkcFwN0v+es

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1f211e44ffcad6b1630a962b7e440c434d950c510968dbc119bfe3cf1b8ec103.exe
    "C:\Users\Admin\AppData\Local\Temp\1f211e44ffcad6b1630a962b7e440c434d950c510968dbc119bfe3cf1b8ec103.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2520

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          7KB

          MD5

          ee9c7261db6701128d147df3c326e3ea

          SHA1

          1379130ccf303a262ff66429e0934d167a1c782e

          SHA256

          c96753c625bbfbd6a0eb4082647e4e07c8a592e34c28a52666967e0200e1e9c8

          SHA512

          2c9b601753c98828bf8a916924843034e7ab330c97b4382b27beb97d68e682fa5dbc7e12da3149fef384668d7ba43a0e70484a8f576753fd09a4341e77d45a59

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          7KB

          MD5

          ee9c7261db6701128d147df3c326e3ea

          SHA1

          1379130ccf303a262ff66429e0934d167a1c782e

          SHA256

          c96753c625bbfbd6a0eb4082647e4e07c8a592e34c28a52666967e0200e1e9c8

          SHA512

          2c9b601753c98828bf8a916924843034e7ab330c97b4382b27beb97d68e682fa5dbc7e12da3149fef384668d7ba43a0e70484a8f576753fd09a4341e77d45a59

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          acf5284613a033ca5f00c04c650916c9

          SHA1

          6983ed94b291705772c58aec5f591dddc946dd67

          SHA256

          21dbaa6f23b17facb769e452bcfac1158ac5ec4fc27d90507bfa4abef4d0b5ec

          SHA512

          c4a7529db2bf2d04c1645b79d42c9e416fe867317f973099395ab7090809808249ea7615c1ca760d9f45efe68fcf69069d349e5947dae0455e847e8d76b85cd7