Analysis

  • max time kernel
    148s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/11/2023, 17:46

General

  • Target

    b108707a968995d2d6b47803a487cb8b6b01e926758bc58cd08990204f782e8d.exe

  • Size

    4.9MB

  • MD5

    d942c3c937e732d608953377b3445bb0

  • SHA1

    20279a79ebbaa88aa6bd081cf78148c593c4d2bd

  • SHA256

    b108707a968995d2d6b47803a487cb8b6b01e926758bc58cd08990204f782e8d

  • SHA512

    c9cf9749302ca7ce05786c6996a0788047758d53e274dbabc13e91af955e41731225a1723af85d0fa188855f92d5879f0f322f163ed32997efe72602c426d0ad

  • SSDEEP

    98304:nrS2H6ei5ncznNN2co86WDASKdzOJDb4v+:WYzX2c6WDawN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b108707a968995d2d6b47803a487cb8b6b01e926758bc58cd08990204f782e8d.exe
    "C:\Users\Admin\AppData\Local\Temp\b108707a968995d2d6b47803a487cb8b6b01e926758bc58cd08990204f782e8d.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:940

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          6KB

          MD5

          5787d455c23522a9286200fe1d082e7b

          SHA1

          f941d3431437ac5564dff5c8e44b8691166cce02

          SHA256

          201e720f94cda3a9b4d17ffbffbae4cf9ee09e238564c07f18f9f4af69f32f4f

          SHA512

          f9968cbb88174bf2dd43d869105108b85ba78801c4ebc9bee208aa1cc6798604d04bc317918e0308605603db231367a6f0c508110b2a0926ed7a8cc20aaff7f1

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          3b62213055ad304969536ed7f5ce28ae

          SHA1

          966a2fac5d1184021aabd038d0cd9e1a7ea77dd2

          SHA256

          2ecffae971daca9eb7c640701d5a28d3d82863c9b0a655245f0bb63416782b96

          SHA512

          3494dceb60fe199c8e5c51e67a8e3bba718733113bbd14033f9d4cbfde292a1ddcbbe15da611a436a2606a326c04195713cb8db2ad5b735bd4a627334803dd11