Analysis

  • max time kernel
    140s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/11/2023, 17:46

General

  • Target

    7d2fd72be95e7fd5d558c1a2909438a24a3c39f38b08df688c5eeb98ae7824ea.exe

  • Size

    4.0MB

  • MD5

    e3538caf43e08055e6698e83cbcbc3ea

  • SHA1

    51a38d44a252529dc458634b94fdcc80442b1d53

  • SHA256

    7d2fd72be95e7fd5d558c1a2909438a24a3c39f38b08df688c5eeb98ae7824ea

  • SHA512

    2e7d0f1fe7e0b57dccb2459bf11f81202024fd85b41f613221d0aee74490ef2237ecd3b33dbcb1622cb7f7a9cc0e9144ba6e3f17a2a3cd1996de1b6d93ec4701

  • SSDEEP

    49152:6ub3nCuhEBygPHQK2FWK9w8Y+r5u8QeKxFOJxdb4vZKVx:hb3CuhEcgYK2FhKdzOJDb4v+x

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7d2fd72be95e7fd5d558c1a2909438a24a3c39f38b08df688c5eeb98ae7824ea.exe
    "C:\Users\Admin\AppData\Local\Temp\7d2fd72be95e7fd5d558c1a2909438a24a3c39f38b08df688c5eeb98ae7824ea.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    9e429fa5913a8f97d53daf7b7b9012a9

    SHA1

    73716230657db4feb48a4070a0646ce1a32701e1

    SHA256

    8306e5d8f57e3a7091c9c1e55dff5b314e73006462883626e8cb45412e4d7082

    SHA512

    ac722f81078d14c2d99de89a6b93c8cf995c245db38a95774f69afb7456fd9b9b3e9e0369c67e2783a02f34ddbf7937c417e9b133e42f23d133fd4f10a412167

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    650e580a757797d6cddc2daf34ff2c84

    SHA1

    3e4698c885756a7c51b524154928813aaf4b9ce9

    SHA256

    2cad1102dbb24db72d7adba877e4767676e47de24a361871dbc5ad15d1ae6eef

    SHA512

    7aea95570eb3f16568329f994d92afc6e395fde36d6420e2b71ab5aba7668d2fbae70335da71942d391285b6a9cee8fbf5d9836cff33f1ea06642d646fea1fd6

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    007ef6bfa1c313b2ad01497f96abaa49

    SHA1

    cc425f01416d40a50812c8844f5b1015863e5caf

    SHA256

    3f6186301f0a23e5f13c3b114ebcb5c0f0ef40b56343100c7328166926d13bb0

    SHA512

    d79aba169e779073d321f800585992a41d100a7c38a097599e69d8aed35ad98ed363154292398688d31ae6218fd5450348288383835cdc918ca39d9c52bd20a0