Analysis

  • max time kernel
    127s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/11/2023, 04:40

General

  • Target

    785dce3066fb404e64250a9d6558d6a4c8afe4d3ce06a17e403f5d15ceae907b.exe

  • Size

    4.0MB

  • MD5

    9d675f1dc40b85c5800e2a356e246dcf

  • SHA1

    5d224c82238f54a60510408c3a96019c5444e775

  • SHA256

    785dce3066fb404e64250a9d6558d6a4c8afe4d3ce06a17e403f5d15ceae907b

  • SHA512

    f9a0d8dd17209f74b529a6289a86a3667b38e17a10822c48c12151a48490200c682c74dd14e3914ecbc54774eb399ed0f05df1b85b503be96ed7e4b508c3ce19

  • SSDEEP

    49152:3ub3nCuhEBygPHQK2FPzhhe3Y+r5u8QeKxFOJxdb4vZKVU:+b3CuhEcgYK2FoKdzOJDb4v+U

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\785dce3066fb404e64250a9d6558d6a4c8afe4d3ce06a17e403f5d15ceae907b.exe
    "C:\Users\Admin\AppData\Local\Temp\785dce3066fb404e64250a9d6558d6a4c8afe4d3ce06a17e403f5d15ceae907b.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    58e4d067b41d2b4472a1dc0e4b0c6457

    SHA1

    04dfa107722320ae8c0a5940573ec1405a6b9350

    SHA256

    56d41c83e3f189352237c3a5747cef5a041334b3f50ff971cb97de1db88617f4

    SHA512

    17e97689ed5c49723480819de46df90445500a6b414273405d24e61296297cc69ae7bb206ed835fe7704cb7b9d188a669981eceb9a53f81b7e853677bfe5e9c8

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    5a1eac063192f7927c541334d0c14ad7

    SHA1

    dc2e36b16b5dc3e3fcf256ed6e85ffa5b0943ad4

    SHA256

    544a23d51f1ae2140d6217d2d29d7d0f40c33502ab57d1c8f6e11a7931d79900

    SHA512

    7ad68c8b8c54698b6e1692fef2bfb215556adc6830175221e4a7fa975edbb9857d455918d7c2b88db5d7a370365ddea759ce5196eef1b7cc426e63a0697e913d

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    f48af350307212196246151f96a2ec24

    SHA1

    956e388de52f5399178d24128e9063401c3bdd03

    SHA256

    617b9398e4d6f5dc2a895f312253c38298137d5d6d06666c39755e0e84c47ecf

    SHA512

    55a8dac9f26d6c6ed2f0ead9b642cc480121894a73ec3db628b4cd558473a35041f3b00f97f0118112e378a594af55536fce24ecd74ae589b28b3a9e7adba0eb

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    9e072ad3ffbc6a949e79be0ac5e28a83

    SHA1

    556b0fe2828ec53f0de9c3637768aedb212ef6a9

    SHA256

    bd6a9ccc8baa01cdc0fa176bdcaf89a1fe4aa1240e3c8c0d6140de1e0bb263de

    SHA512

    56b8acd7130d3f1ae6d95a9aa21dfe0f4786bdb3b11f0bf8f1f6978823337af9df2d63a0c56341af3baacbb33fe63868e1108179f3c450e71b5070262cf565cb

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    5827e4e5bf15ce4fa01c24c8139d9a87

    SHA1

    ca4fe2ae24bd63a705389b07ecf9aa75b08e8b03

    SHA256

    e4cafb442a5e3693ff63bbf7fc772ea25350082a0f3f8cd7f8553f8daf5b336d

    SHA512

    44eba66417cc70c10f8c705e366a45966b5a6aa532b78e267449c6252e9b3ad7842a1d759eb787f9df015020528aff61013abfa622058719c545373f2b6ef609