Analysis

  • max time kernel
    131s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-11-2023 14:27

General

  • Target

    78d8b2b3448b05d12d87fa0f23e62a6687eee2632d1e1930e45920ecf73a8310.exe

  • Size

    4.8MB

  • MD5

    8566792a5d8ad8b07cedbf6c675a3f07

  • SHA1

    d82fa8ddd638612efb11e6d1695a0800a7cd4212

  • SHA256

    78d8b2b3448b05d12d87fa0f23e62a6687eee2632d1e1930e45920ecf73a8310

  • SHA512

    77980c555bd47e550191f7e0b77e58d911c118a99b2d3c13cec5bb481fdb65fdf4d55ba7caa9bb65e0af5d2f1315a4aaf0cd8fe223a2ccd4dfdf2e6d2397a6d2

  • SSDEEP

    98304:7TVlYQiFIUueAAu2PkcCO3LUKdzOJDb4v+es:NlY02PkcFwN0v+es

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\78d8b2b3448b05d12d87fa0f23e62a6687eee2632d1e1930e45920ecf73a8310.exe
    "C:\Users\Admin\AppData\Local\Temp\78d8b2b3448b05d12d87fa0f23e62a6687eee2632d1e1930e45920ecf73a8310.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    746f67c082a1b52e8fbf292ca98c7d68

    SHA1

    cd55b1255963a13c5a285ff88fdb854f9d15b37f

    SHA256

    d9ece13fe03124aaf78cd563be17aa1bc1b2a13f8441e34b1b818a842e467afe

    SHA512

    1e0cda7f0439d16ea821e8f2808febbfb1e84cc1aea74e018cb0ab406c30e3801bfd217810f4ed6491550b22ce948a9427b341b4f60d47c27c24f6afcda15390

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    aab32483c38575daf867cf1f89f42f43

    SHA1

    c5a5bf8ae4b95aec0bdb1c6f81985a3fa586a9e3

    SHA256

    a645900a70beb5ed357a8dd32efc2b3502aaa49bae565f4b78506a987e2fbe77

    SHA512

    ed2bef95f1def2e38c3afc729c0dd46e5b6ebb29bebb3caa010f1e4ecbbce055d0edeaf03b38895179e6274e34e9fdeeb664016a023414cf0befd5d54abbe523