Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-11-2023 19:02

General

  • Target

    5742ad7f9a59e1b58a548198a077173365d98c3cf8716fb8c9b78cece60782ae.exe

  • Size

    4.7MB

  • MD5

    54e2d390d776f3e89c4453b7382bac81

  • SHA1

    aaf4998433bf0545143f3f8296951583e712bc8a

  • SHA256

    5742ad7f9a59e1b58a548198a077173365d98c3cf8716fb8c9b78cece60782ae

  • SHA512

    901f16d2ee31daec5c79cbbf57deb07fdd96b5b3f42aa986ff79900c6391040ca981cc2b7535cd27141fe3686f07cb7b0dae51831099b0d93f4676d710cbcd97

  • SSDEEP

    98304:OhQI4CudV8s3Mgz/32CL0xKdzOJDb4v+:VbHF1wN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5742ad7f9a59e1b58a548198a077173365d98c3cf8716fb8c9b78cece60782ae.exe
    "C:\Users\Admin\AppData\Local\Temp\5742ad7f9a59e1b58a548198a077173365d98c3cf8716fb8c9b78cece60782ae.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    5438614b4bf512538d0f21ee4de868fb

    SHA1

    278dda650ab300cdb86720a3ee0d6b229cd19b01

    SHA256

    221ae1250c0c8ce1eed5d66f7432d57369585f636d21729703cdb62123cb64ab

    SHA512

    bce462e5118dd1742cb20bf2713bd4cc80d6a92d66d1b48c80573911c774466190c23dd9540a7d3c16477b2c31549b51e932927e7e7e24ce954de86755ee737c

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    74b51b0a0bb38a56e9f6a1f44379d17c

    SHA1

    2c13715389c5c2dd2e480d387c1d505bddb83461

    SHA256

    e4aad1b7d913fa5f6eac99dc4568bd33b4fb5171115599a2d24e5b27bc416fae

    SHA512

    2860767aef3d4e5f6a994abb7b82ffaa26e3c0230a5f6f452b721cde49c519cab287689e1eda162f072c084340c4488c5c3ca0fdc3e0035b634544796cc40329

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    2afce91f4d93fd98c52d9b6140f1f49f

    SHA1

    163a3608efe027be1ca35e178fdc22cd089ea2e4

    SHA256

    a45b800392f93e54fa026a048efc0e8b40f01a063955e94daa156d0ad89968e1

    SHA512

    bf0b1836530e149c8b38378f28636e7dcac8cdeb4950df9b406cac97fa0bacde509a9745653f7377db626736fb5b02b91c8408db5b6b724638460cbbd66206b0