Analysis

  • max time kernel
    137s
  • max time network
    200s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/11/2023, 13:46

General

  • Target

    7419f9267f554ebb5c7dfeeb6bc7130d5bffac907098bedfc2146fcb6be7bc37.exe

  • Size

    4.0MB

  • MD5

    e2bbe4cf306578e5d686f0cad4d5f015

  • SHA1

    1e3619e04c68ca80655be73f6956e98d0764eb75

  • SHA256

    7419f9267f554ebb5c7dfeeb6bc7130d5bffac907098bedfc2146fcb6be7bc37

  • SHA512

    8230885b6c9443320b83b51738fd7bfd7787be30104693cb24c533093f4aed0cbebd7cdbbac08e51ea372b73ba6711c3166c11f36262bef441c4c5f889d5532a

  • SSDEEP

    49152:6ub3nCuhEBygPHQK2FWK9w8Y+r5u8QeKxFOJxdb4vZKVx:hb3CuhEcgYK2FhKdzOJDb4v+x

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7419f9267f554ebb5c7dfeeb6bc7130d5bffac907098bedfc2146fcb6be7bc37.exe
    "C:\Users\Admin\AppData\Local\Temp\7419f9267f554ebb5c7dfeeb6bc7130d5bffac907098bedfc2146fcb6be7bc37.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    333039774002e79da7d5169b756ad738

    SHA1

    aca6b79b3b73f8d9bc4d2f5fe3118ec223f309f2

    SHA256

    c43b42da30a6df668f654434c8715ee48f10b05b6a73d3efa0e354be918f304d

    SHA512

    f5607815cffedda01aca6c2b36db370dc3aca314155479e9d9063488f96873798a3563af22bfebef0f31b3686bad2787cca25b823c670f145d82991412781e03

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    59cdaecbb18dec436e0939c327b36300

    SHA1

    a4954f20559fa2790f0e21d1239b63331844b8d0

    SHA256

    e4a1494baadb9cefed2e188d7420b0e7fcc87ac5cfea4506ee7a737a11cd7b9f

    SHA512

    9eb3ff7eb12ed35d6b8f9e915e75ae512a7b21ba71699901af5405f592a6dac0a747ff2e4bab07f63c92bfe5368df374e9ec964e010930547f787e3d3eee2155