Analysis

  • max time kernel
    88s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-11-2023 04:36

General

  • Target

    51926043301abacd27d482ec6f58cfa0cd6d77de6a547acb18fec4627a84a6b0.exe

  • Size

    4.0MB

  • MD5

    6fa39981f629ec9e9d003fce90e141bd

  • SHA1

    ccc513bcab4e463e6efec2c2bbc642e64c16de7f

  • SHA256

    51926043301abacd27d482ec6f58cfa0cd6d77de6a547acb18fec4627a84a6b0

  • SHA512

    cf92320a53180af3ecf459b5b95e105db2f7fb70784cab4329712527b4de4e594c0aa2c420717bb3f17b5c92016f788f80e200f4c49d7f1a6fcd8f17be51a88d

  • SSDEEP

    49152:3ub3nCuhEBygPHQK2FPzhhe3Y+r5u8QeKxFOJxdb4vZKVU:+b3CuhEcgYK2FoKdzOJDb4v+U

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\51926043301abacd27d482ec6f58cfa0cd6d77de6a547acb18fec4627a84a6b0.exe
    "C:\Users\Admin\AppData\Local\Temp\51926043301abacd27d482ec6f58cfa0cd6d77de6a547acb18fec4627a84a6b0.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    e0db04c459c3209cc4e179aa791c0e5d

    SHA1

    b494be219c54ba96e784cffb982147c929b87bdb

    SHA256

    d461031b6f6215aa7ac00d39ac4bdfddcf4994d4cbbbb80d991369b9be9e4a83

    SHA512

    ec502cb555985a511ca69850789a1ae406b5405e334e16a7e51134800c5338668ac2f9f6cf79e734ea913ed9904ebf20be5761027e69408258b3b4ab07ccd298

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    4b9cc66276d8f2a25f5f979e8ca3fab0

    SHA1

    3be932af285efdbb839f15e110756d01c5b17603

    SHA256

    307ac4460b617c237f31f93529638630ad29be41864e598cc97a4522c1a626ad

    SHA512

    8d6c9882632f51762711b11086539dd340d7712128e085e722cd7fedefc3eb4bbfe28e50d7e5ccb8871a844dab82747c1f38a2b63d8a264f37c2c87ac25aa030

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    43eb1878887b08a672dec8d53eb81936

    SHA1

    c800b14e979fb871397f2a24102e94e36c972ee7

    SHA256

    2dccac865a804c764639b9b60ff02e883fc7fa3d38d825944ea717534448b23b

    SHA512

    90b3b76378dd99a1ca2779bb844a0c23b664e2e94a0cb96098fb033a96a471c9e2966223e0ae429880df69ac7ede72b4d35b846955781ed9a37f08644ad57dc5