Analysis

  • max time kernel
    138s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/11/2023, 21:54

General

  • Target

    7217731b9af0ca42b8ebfa9760e01b35fbd1d6fad61d9280cdab09cd3bdc54e9.exe

  • Size

    4.1MB

  • MD5

    a4e26cc8a69b65946ac1264a71dc3e65

  • SHA1

    773c107d0c0f23fd0c69fe2edc4283c162e08f0b

  • SHA256

    7217731b9af0ca42b8ebfa9760e01b35fbd1d6fad61d9280cdab09cd3bdc54e9

  • SHA512

    9ed562318437118162c22adef8c13816856ac1355de6f59f6077f1cb0db9dadae33eb8b54d3e90ada478b32c4c6f0e24ea4290523b48da93e19efe7f4700216b

  • SSDEEP

    49152:Wb2XfWHdZ8BhE7K2dEj9GY+r5u8QeKxFOJxdb4vZKVe:U2XeHdZChmK2dZKdzOJDb4v+e

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7217731b9af0ca42b8ebfa9760e01b35fbd1d6fad61d9280cdab09cd3bdc54e9.exe
    "C:\Users\Admin\AppData\Local\Temp\7217731b9af0ca42b8ebfa9760e01b35fbd1d6fad61d9280cdab09cd3bdc54e9.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3884

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          2KB

          MD5

          3fb42480d32af16cd7180bab0abbff2b

          SHA1

          ace48daf47793431e828171e4d5347efb9ad0982

          SHA256

          8458b48a3e867db8c66be5f1cd0acbb95b8f0bd5b5811dceb016001bbe92fe5a

          SHA512

          c1f7eef6c154e4533cefeafabd70eeff096f72002f722fb9431c3cf0d35c8dc0389710dc822b006960739d66d1a4d78dd800fd7660ae3ebfe21ec754e7148a8a

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          3KB

          MD5

          350837c56a88a1c759e270bff09b9711

          SHA1

          fdec937e3c935616927cf25048f48f8c8145eecc

          SHA256

          00e5409fc66d1462d6f65ee5f8097374fcd71f5e1de5ebf8d893ca7e75906938

          SHA512

          84b2fa08657e0c365b03295d219c84ee0529540d79c67b379178bec45d2634f6d92a2dd2bf685c398fb415cd11135596ecdc38842c6a9ea6ca7d330c52b5e391

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          5KB

          MD5

          629b3750fcebcd88f6fa57a1e8e04301

          SHA1

          f6b0792b9112e7aafb44149b054927bf2b921622

          SHA256

          6ba6beb95054d3a1f099099bba50412a4543955887b3d2e67000cd1c5cbbc15b

          SHA512

          e858b8c0d818b14e777ce777dfba5be92e0405d36448be25aa82a2e70576538cc9f334f44a55f2e02b481a5cb1623673de83509667ceeff4cd34df1bf6a412be

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          f30aacc40f47bd288785c5a9e611001b

          SHA1

          6ed09393a55fe824664a4a67ace46ff0a677e253

          SHA256

          40ccd24968a48e6202fd9fc8488a0df89a145cabf85221aabc8853fc4e11bebf

          SHA512

          1f97bbd5c4831fae7938a914039a3b7f1488980522f2a59689d84195da95d369ec6158c5eba5a168ab0c8269fdc307ec50a5dfb27e999fbcf702b3b094aca758