Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/11/2023, 10:49

General

  • Target

    d65a1ada558039e4aa7ae9d7462693524738afd16e5d0785faf56fc21d1c2192.exe

  • Size

    4.1MB

  • MD5

    21ea6af8e89937a1f9c2e37c288fda39

  • SHA1

    71e05642a2217dc811fb136bdb12f3162f670a94

  • SHA256

    d65a1ada558039e4aa7ae9d7462693524738afd16e5d0785faf56fc21d1c2192

  • SHA512

    383937bfdde6dfb918891eb33d6152a0fcc6636b2437bd5eb8f7270d223376d9650d9648be25fff44b566871f73caf5a528175d9f7ea5d7bffbe807477375a2b

  • SSDEEP

    49152:msLru7MMI9WcHupei+kncBNdVpcBwfY+r5u8QeKxFOJxdb4vZKV:LrS2H6ei5nczn5KdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d65a1ada558039e4aa7ae9d7462693524738afd16e5d0785faf56fc21d1c2192.exe
    "C:\Users\Admin\AppData\Local\Temp\d65a1ada558039e4aa7ae9d7462693524738afd16e5d0785faf56fc21d1c2192.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    5845beb98321e429d6772ded70a32b73

    SHA1

    00578804ef194bf0bc698e4a6a270d02cf37a10c

    SHA256

    9a6e863265db13aed8fac333e96140d4a608c90e3a8007a91a054e5b90af70ef

    SHA512

    d34fd2936e8562a3b2658364c492ab094438165a806a34e94b9faab2822b82553d8a88e2973297c8f11bbd9f297fea26dc66fcd9118d80dc4bd8d818e83cd88c

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    e790df181a0cf598404c54d5d4d82ed7

    SHA1

    86d76b29fb328a4e4071e8383ebcb5eb893e37c4

    SHA256

    143777686522a0a3aa7f4cf8dd2bb003a800961de0f2a81263694f3953a03389

    SHA512

    3be7e26c0cbdf26adf7fdb0fbfcc6d4dbfa3d4d315bb062876debc8dfe32d7db61d345fa27b3e3fd1e18e256c44300d6c5b1c53897f58571739b3bb4199180d1

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    e790df181a0cf598404c54d5d4d82ed7

    SHA1

    86d76b29fb328a4e4071e8383ebcb5eb893e37c4

    SHA256

    143777686522a0a3aa7f4cf8dd2bb003a800961de0f2a81263694f3953a03389

    SHA512

    3be7e26c0cbdf26adf7fdb0fbfcc6d4dbfa3d4d315bb062876debc8dfe32d7db61d345fa27b3e3fd1e18e256c44300d6c5b1c53897f58571739b3bb4199180d1

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    c2afb16ac5333867af2749d1eeb7342e

    SHA1

    0c8fbadc538c4c9b93a60176acc29f0900c961db

    SHA256

    048135160d9420f0fff3206501ef6a03013db7870e16f7c57e87b9ccdefc3977

    SHA512

    e3e44dc02f607fac929b31c3406c276309de01204ae8781185143d716f4b0280a24f0786b8114c05c8f4f5ccf1f8bf796b2e43028e0fbb593126cd13b75220c8

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    72d791cda5d50064856b74694e202dd2

    SHA1

    5dd364f8bd3dc4639c87fcfad9eb206cded07f91

    SHA256

    bf9876a0e6cfc6d9cb167c44d6440a047115697397a29f6f944e77c3c0c21f05

    SHA512

    1f564bd406c91e5ee7d59e38905fc1fa026e80dc448f6259adafe6a2149ee733bdd500a3a2ce9f996c0ea7366806b2fd1110c2b9a679976eb3819c813d6dd42a