Analysis

  • max time kernel
    140s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/11/2023, 19:49

General

  • Target

    3aee1ac7557f5ef9ebad038a00b88a74e79eaf0a7f3816b600a39e848a84cb23.exe

  • Size

    4.1MB

  • MD5

    77309b4e82c5546b144b3f4f389ad344

  • SHA1

    bd05abf3b90b18101be87c01e3bdc7216233cd8f

  • SHA256

    3aee1ac7557f5ef9ebad038a00b88a74e79eaf0a7f3816b600a39e848a84cb23

  • SHA512

    685f55424983fb0ddd2f39fe9723fa15029a5c1ca5bb3d346e550a78b1e83b961efd3066984864b692351b18194136ff97176eea99784f738cb6cf8e2aad75cf

  • SSDEEP

    49152:Wb2XfWHdZ8BhE7K2dEj9GY+r5u8QeKxFOJxdb4vZKVe:U2XeHdZChmK2dZKdzOJDb4v+e

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3aee1ac7557f5ef9ebad038a00b88a74e79eaf0a7f3816b600a39e848a84cb23.exe
    "C:\Users\Admin\AppData\Local\Temp\3aee1ac7557f5ef9ebad038a00b88a74e79eaf0a7f3816b600a39e848a84cb23.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    46645158f80d57848212be6a566e8e94

    SHA1

    299697e051d75cc56a56a31b2313e600c595012b

    SHA256

    71d682fa09af36145f83c177700352599bf0a123fd1c4c0aa0ea7442fd1e775a

    SHA512

    452ccb118700f5eb6dc9d8caaa95492deffaca2ae596769642eb43ba722fcd0b803c4185b1aa3b1f955a97a81b11d17d48dd0b48954faa030f04cee0fbd018ec

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    b63d8ff04e16600427bb886c3ed900a6

    SHA1

    a77605180a2e4b4f07475fcdc5899a97eacbc8a4

    SHA256

    5cebfdc75656e2964610de64d2c7276d77c235a6edb57a84c111147156a6425d

    SHA512

    a8a506392ebcd3613d4ff8fc14e9e0a001eb1ae0a1254c49ced6fa7f39f7cf1d225e5678af94b5f1da11962f0145ff532bc4cad20db6ebb549e17b9e218b88ed