Analysis

  • max time kernel
    139s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/11/2023, 12:05

General

  • Target

    026d354f4d5d064a427a5977d24661a5016e84a8f487fd5d5515795363b33138.exe

  • Size

    4.7MB

  • MD5

    a5126a88ee09975ec50f5d3ecdb873aa

  • SHA1

    fe6aebe4ef4f5a37e68d89daac47af733b712434

  • SHA256

    026d354f4d5d064a427a5977d24661a5016e84a8f487fd5d5515795363b33138

  • SHA512

    7b1a25b128a3d92bdd3f2776f4559777968005471c193cacbe885a87d0ae8e430c8e8c35134aeb4672e6416210657ccfb9b7ac2c0f96d3bb7064d53513179cc6

  • SSDEEP

    98304:y2XeHdZChmK2dkvDzF2CLcKdzOJDb4v+f:edZybPLwN0v+f

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\026d354f4d5d064a427a5977d24661a5016e84a8f487fd5d5515795363b33138.exe
    "C:\Users\Admin\AppData\Local\Temp\026d354f4d5d064a427a5977d24661a5016e84a8f487fd5d5515795363b33138.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    77f27f701c0bcea89b06623bce71f0bb

    SHA1

    f546fecb98ced75a36eaeb968a0dd86aa5cd6cbe

    SHA256

    19cc3eaec6395745198aa2f571f21af2e94fd95761e4e0463c7abf07765949ea

    SHA512

    5801a65a61e671319b3d8db5fb2254eabeaecfb42a99e8564ce306cf6814ee7ae50e01a854cf577dd9bd44c5e910774233c26e7c221d6ada51317c77f4867728

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    b34ab8c81a1669070eb631837d7a7315

    SHA1

    ae175a68393151cc88c88cd4300f1c4ca7c29d32

    SHA256

    a565931bcda7ed997abe8ec63bc824b1fc1ea6723c98ad220259628f7b84d9a8

    SHA512

    2fcdefa0e232cbd26fd795c5422d67c26c1b0f1114af6d754c95ca6b5e94d2df9a65e6a1361d0cc741101501a91075929069ec1c743f3bec078db4f0610be496

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    fe9fcdd6b4964c77c35cdaaf02bc33cd

    SHA1

    7d6ac928fbfbaffb01b4cb831796628463cc2918

    SHA256

    7a48be414b8d8e65bc1631329491f8104253dda97bcecf803d0d88c445993b4c

    SHA512

    3692b9be99fc3d2be8aac81e492d6d5b20302eea9c47afeffe9c16cc410fcb3d1b722a54caeca5e76bc35123a91a6fcdb198c851e648b78eb4cbb6501f2e2c50