Analysis

  • max time kernel
    142s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/11/2023, 16:37

General

  • Target

    f6cd58cb6e9a1f942de77d800426ed335ca41120e466d01513a79100178fff26.exe

  • Size

    4.9MB

  • MD5

    9a2220b79831d94ce279e54c95414939

  • SHA1

    38ef0560a53c59803f137bb7a261d0977fc94190

  • SHA256

    f6cd58cb6e9a1f942de77d800426ed335ca41120e466d01513a79100178fff26

  • SHA512

    455f7e4264bc314ce6492351437f28a698e56c526361f7d86b0b5ce09b87dc4b38b533e0f48e1f18de79a698f6cc5652c4857222ecb9f426b2ed9dfbc598574a

  • SSDEEP

    98304:nrS2H6ei5ncznNN2co86WDASKdzOJDb4v+:WYzX2c6WDawN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f6cd58cb6e9a1f942de77d800426ed335ca41120e466d01513a79100178fff26.exe
    "C:\Users\Admin\AppData\Local\Temp\f6cd58cb6e9a1f942de77d800426ed335ca41120e466d01513a79100178fff26.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    d1b5c29c3450395029ef1e16edb89604

    SHA1

    f021b4da3f62a1ee39e6494cd2c522849e517de7

    SHA256

    1d14d84f650d888c45105fb52529180c765b4bd2ff27ac27b807305d7b2f263b

    SHA512

    bf3e5286d258185102bcedab8594cf38f407cbda3d9ae1390f56962cc914e31e74d9144f5d7d0c22100281edd1413bcce58171147bdf3aa0117c114277dc0669

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    a224da04fce1d232fc5ff60b252b5ce5

    SHA1

    2b1f915babdbf3ce5cfbf0914ee268c5a893fda7

    SHA256

    a0d56d64a28e98874ca26bc29ccf25fb11f0d889ecca340d0ca69a6d513a6d83

    SHA512

    bad95735130078f79afb2ae395ac059d49a0e979bdc80effe9a6830796e9a9dff737a80f976af1f295f94285a9a76126a95cd4ca8978ea633a105b33fde4d259

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    28e827df1c40af05f4472380a1b4de8e

    SHA1

    2d4401b414e23a438111d07cfb1edacaac290c8d

    SHA256

    4f1223d96fe69b518b67d70819d7b95977a9349bb817f70c465506cf2bdc2c2b

    SHA512

    2cb77238a5418c550c7d023c13b18d4fae30953b0e997ee20546fd5827740bdd7f873a5b9a70c341604c92c907a93fe89709a928b2521c577a1acedf498965a2