Analysis

  • max time kernel
    142s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/11/2023, 08:40

General

  • Target

    72014b2e6ebe53c7236610bd6b94bf5f067a11e7b036279d68603e6c8e2739dd.exe

  • Size

    4.9MB

  • MD5

    f302b79360956db19cc074848ce32ef8

  • SHA1

    8619ba248bc167a425576f978a4f254327b371e7

  • SHA256

    72014b2e6ebe53c7236610bd6b94bf5f067a11e7b036279d68603e6c8e2739dd

  • SHA512

    cf1331b5470c7620e62479af218e1126f1e11b785370a6295f70fa109fdf9219811e1b0ff95eee94ec093c1a4f105fc090242a3c38bf46a6d7c22b4f954f5cd1

  • SSDEEP

    49152:5sLru7MMI9WcHupei+kncBNdVP3uhe7c70qI3a17e2Y+r5u8QeKxFOJxdb4vZKV:UrS2H6ei5ncznP2Zp7egKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\72014b2e6ebe53c7236610bd6b94bf5f067a11e7b036279d68603e6c8e2739dd.exe
    "C:\Users\Admin\AppData\Local\Temp\72014b2e6ebe53c7236610bd6b94bf5f067a11e7b036279d68603e6c8e2739dd.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2384

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          3KB

          MD5

          f517180d586e88cc34f5f432a47c0d04

          SHA1

          4e85dde391190540dae49d79fa52700160a62d3a

          SHA256

          b3eb1b299779099a8ba7e094a40104a8ac282574dd4e3810787721b4009872d2

          SHA512

          d320ba4d76ca171c69f0a759ca81b9f89bdeb9eb3f6ac40070615fab4ca8c1944d5025350688b1652f247c2b6fc5f99d0104b724f4eec6e66d3e72228924ba34

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          3KB

          MD5

          80aa19018150e3c1c8e48df8a5bd16a5

          SHA1

          c0471f2c0bd16f946531aafdf301b8f80c1d002c

          SHA256

          a5f4168e4bb799e9cb1aaf1a3877a0efa550136ca3baeea2aa06b8b48ee793f4

          SHA512

          7aef89de370b83d0db2db3bb45a4f831a5dc7d52ec000393fbc96d60e58ae7878bb6b7ac3d138f0e712d3d8b918ee433aff143509bc5c092aa5d46e4acc11bf9

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          7KB

          MD5

          31eb31cea357db4e3b079a20511df332

          SHA1

          f489903b9c7ca0e161a92bd090d69443a430a159

          SHA256

          529925bbbeea8ba67fb951b08cb8e59be076a5d69e163e265f1cbb69baf64f2c

          SHA512

          c94d6dbbd3c69f0a6a7043128529794d35e988fd6573441a9ab90bd5ba09b5d44d122bad96c393e74913dd3812f6f940db2d048526d46e245f8f09a1bc4b67c0

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          358fa70d28f09f0fe9dee436d9287648

          SHA1

          fadd65969ed386685270d93e1ea98ff2a3b7eaa1

          SHA256

          84c003fed20e40f16c06c9a936b8c49146b6a5299a539ab81b5fcf86fc6989d8

          SHA512

          ff4a597beea2f6772bed6ddc9224af32718020992186b995d31c9a4161d5327f441b77a30af3ec23c6d33c89644c255389b5933fbc3bfd489c466f189a0e5bb4