Analysis
- max time kernel
137s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20231023-en - resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system - submitted
05/11/2023, 19:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e9cb6af71f2b6652a19f8d9b8c537332cff05c15c1ba710b1ba77a825e166ebd.exe
Resource
win7-20231020-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
e9cb6af71f2b6652a19f8d9b8c537332cff05c15c1ba710b1ba77a825e166ebd.exe
Resource
win10v2004-20231023-en
2 signatures
150 seconds
General
- Target e9cb6af71f2b6652a19f8d9b8c537332cff05c15c1ba710b1ba77a825e166ebd.exe
- Size 4.9MB
- Sample231105-ye6q2sda79
- SHA256 e9cb6af71f2b6652a19f8d9b8c537332cff05c15c1ba710b1ba77a825e166ebd
- MD5 686504ea18683ef47a1700c96d60b66a
- SHA1 bd83f7408a82aad453a447b004172464e67d6c1f
- SHA512 e1c784cac4a5a57859797eff51b09addb8f68a3419a4b115da54f109605d69e2c0da0cb77e290a55b5c19e78c0b7390cbf59180c3bf5bcc9a6be723b88aef9cd
- SSDEEP 98304:nrS2H6ei5ncznNN2co86WDASKdzOJDb4v+:WYzX2c6WDawN0v+
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Downloads MZ/PE file
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 412 e9cb6af71f2b6652a19f8d9b8c537332cff05c15c1ba710b1ba77a825e166ebd.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
- Size 7KB
- SHA256 4e49db0465ed265790c3d8048981bc151291ec0708d7a0468144b7dfb93b1bab
- MD5 8bd4591ea30166057331a9ef01bde69a
- SHA1 9a2b353a4397e657e31cf48a0162f42bf61b8766
- SHA512 0264d70335ced409c72705327f0c1f0bb66ce6f40cc027daace737457b2fa9afc4b56974cb0f6d3a1540180e48b686ca5e1a45d456d64815f9ee0b5b1f98fd0a
- SSDEEP 192:6QHGdZ9WYsYPY9flj2ZszdP3vQQMNlj2dQ6eiMNlj2dQ6euK5eT5U:EdG1CMj2ZszdP3vxMNlj2dQ6eiMNlj2g
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
- Size 7KB
- SHA256 4e49db0465ed265790c3d8048981bc151291ec0708d7a0468144b7dfb93b1bab
- MD5 8bd4591ea30166057331a9ef01bde69a
- SHA1 9a2b353a4397e657e31cf48a0162f42bf61b8766
- SHA512 0264d70335ced409c72705327f0c1f0bb66ce6f40cc027daace737457b2fa9afc4b56974cb0f6d3a1540180e48b686ca5e1a45d456d64815f9ee0b5b1f98fd0a
- SSDEEP 192:6QHGdZ9WYsYPY9flj2ZszdP3vQQMNlj2dQ6eiMNlj2dQ6euK5eT5U:EdG1CMj2ZszdP3vxMNlj2dQ6eiMNlj2g
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Yandex\ui
- Size 38B
- SHA256 bd87bd592a6b0ebfc677ecc5de23e8f46879c59def51c598b1c918d47333d63b
- MD5 df388058c47c2e3444e7ad52df8c18a2
- SHA1 f7762b93b45de2a02bdb32cd735784ba78cd06c5
- SHA512 e157f1ce94654ed0a855dcc70508660db26daa7b940db19bcf6a823840e663409471c4d0043497cae071f01789fc46e23586a0d48ac5df295525e553fc1f16f6
- MD5 SHA1 SHA512