Analysis

  • max time kernel
    138s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-11-2023 20:02

General

  • Target

    94500a91a6df089f9863386d1e16684301f47f43cf0b2c8eb11d07b6764ed478.exe

  • Size

    4.9MB

  • MD5

    c2bd142ec90552f6090e4c6ec8cea78c

  • SHA1

    c40568572712b05375d10a985cbaf98147e601d5

  • SHA256

    94500a91a6df089f9863386d1e16684301f47f43cf0b2c8eb11d07b6764ed478

  • SHA512

    4c3d352226171daa408817adea469a7e15ed7d245546b98c513712309570c8a6aa4785b4f80fd27abc2473cf5bc80df2e1d1ccedfced349774af273148927dff

  • SSDEEP

    49152:tHhWJb8R2TOaCZgdVDgCes3jII0Ee9Uc1c70oPBkgoY+r5u8QeKxFOJxdb4vZKV:RhQI4CudV8s3MKI2tkVKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\94500a91a6df089f9863386d1e16684301f47f43cf0b2c8eb11d07b6764ed478.exe
    "C:\Users\Admin\AppData\Local\Temp\94500a91a6df089f9863386d1e16684301f47f43cf0b2c8eb11d07b6764ed478.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    c63b52bfb68d2cd25a140e18aa90eaf0

    SHA1

    c305b13a93229b39e52bea7cc6d69e0741eea6cd

    SHA256

    63ac7bced6c188365cc43b1827a204557a6e017641c1449c18f8690c86b4566f

    SHA512

    a9d25254da720a7da5168f2d5d55f5a3a459a7fd02f87705a2ed42ceea33546d2f2a841baa66ea81a76969e5b2d2d34557e190ffef20e561301bbacc6fdc5c7e

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    e5b055ee3c516bfb87ab4d55b5ed5884

    SHA1

    a762b775268c3d9291cb9c3405bb7ca8ffd22144

    SHA256

    2ea8364e2af668c2de0ad124b4b731676f602041124537df1cf231059fea5c6b

    SHA512

    f2f30454f700b99372662a269e10090812e136c899e16930093bef5f8050ce12079e3406e814a9780d385b8eb3b392588fb939fcf607c08c91ff055b5b144f6f

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    f0389792bdda7d1c4d8e6c886cdc469c

    SHA1

    f9bec9d21a46ce0116466b55ca22a21754343eea

    SHA256

    ce3b9fac3a74fe786f724affff1c7bc2e420af98a312dbbd91264d38c34e6a67

    SHA512

    b1c58eebeb01678efa417b1d2cbcf128692b88b96684cdb8cc9b32ad78f96882583368c029ea25e71f499c332073210dade436527a27fac52d9ed39c9164189b

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    7a23fc7c9b859cd054ac04ae115198a7

    SHA1

    be5d9e3a8aee6535d5d6017e4cc796ff42adb583

    SHA256

    d44d297bb5f33ad9d59457739c9e8c46b982c6d2f3aa73bfc6f1933cc4d077b9

    SHA512

    f8faebda03e460b42e5fd5828493aa761609bb5cf6c1bf35bf2deef3cb8e83a19e0d69ceb01fe48918e9fce3ad520e5a3078702e5e3d4e239bd3f9c69c26792f