Overview

overview

8

Static

static

3

95b82b9e67...69.exe

windows7-x64

8

95b82b9e67...69.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    130s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/11/2023, 18:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    95b82b9e67b3643241b1dc9e1f60be3f19c925732f897b9486eda4c023a67369.exe

  • Size

    4.0MB

  • MD5

    6f1e837b51347eb059e6fb9b8b8ede9d

  • SHA1

    c64c6d4f05e0a4c6c646efcc4870d350a069e091

  • SHA256

    95b82b9e67b3643241b1dc9e1f60be3f19c925732f897b9486eda4c023a67369

  • SHA512

    340b5c0c52c3d781e5e4af864b506e617f6648aad626f7daf5a293912a80348965204404f9937f85c0d033aa2e2aff246c76b21e7f5a8fbf8715dc8b3cdc62eb

  • SSDEEP

    49152:6ub3nCuhEBygPHQK2FWK9w8Y+r5u8QeKxFOJxdb4vZKVx:hb3CuhEcgYK2FhKdzOJDb4v+x

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\95b82b9e67b3643241b1dc9e1f60be3f19c925732f897b9486eda4c023a67369.exe
    "C:\Users\Admin\AppData\Local\Temp\95b82b9e67b3643241b1dc9e1f60be3f19c925732f897b9486eda4c023a67369.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    1KB

    MD5

    0b012a32f6c070c59819addde202a07f

    SHA1

    bf2024e746fa7bf4f7aa4a4fec3114f014e10e13

    SHA256

    2f7bffea5ce2c660174dd22f56edd6ca64b04b3aa403fdb998fa0dc4ebb19852

    SHA512

    b92bf96a7c0c1bd222dac70f314e208a91f4b21cc687a12ac7f8987430106cf782ac9d5850d5fb37603ba4980e5712ba71cdb95eb46433706b6ead958aa9b0b1

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    4KB

    MD5

    15afa3b2a851cc85b85ed68478b65103

    SHA1

    59495d255b686274fe53c10d569b975e10a07e52

    SHA256

    ffcbd24b11647fa858093a12c6e0b6b685e20910a50f2d00370f9cfb5ddd40a1

    SHA512

    8837ada396dfbd0516beb4b2521b55e847bbea941dff6dee6db06b9736ea9c675682b412fc15302d22375d41928af04d6752f465963dbcecd87a7bd7b86ca8a1

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    c0fd34451493bf91a8f2fd41ed719c5a

    SHA1

    8b9575e99f8b07582e73adb6c8030c43352aac60

    SHA256

    0940e7d741562af05091de9baaea8b9a48706d968d97fde66e9ea3e2ffc0b92a

    SHA512

    3c60dfaab2e502026722e0e21859c55bc4ea6599269a503cbe5af3b5f19e88a843d69c23dfa319288f7639d2b5884e620fb54f5b83c7f20b6e74d7a77623aba1

    Download Submit