Analysis

  • max time kernel
    142s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-11-2023 15:58

General

  • Target

    947a0ccb9e3ff528ffde5c23f46b0033a45db95b881dd0b6ed5fe7c60cfce2a6.exe

  • Size

    4.7MB

  • MD5

    8c0eb981b40523d7abae04045be25a2d

  • SHA1

    c2e2cdf26bf3f876359980add7c8c330cde50fa1

  • SHA256

    947a0ccb9e3ff528ffde5c23f46b0033a45db95b881dd0b6ed5fe7c60cfce2a6

  • SHA512

    b3c2acb1f39fb72b5e2957fdc7ccb1ca6589bd421493207e0bdef44267ba288d31dbb1559e7e9aee3c3eedaa0c7c2abdfa08e897a0b3fcf89aba055c46dfdd35

  • SSDEEP

    98304:d2XeHdZChmK2dhsD6F3Y+IUKdzOJDb4v+k:BdZL3jIDwN0v+k

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\947a0ccb9e3ff528ffde5c23f46b0033a45db95b881dd0b6ed5fe7c60cfce2a6.exe
    "C:\Users\Admin\AppData\Local\Temp\947a0ccb9e3ff528ffde5c23f46b0033a45db95b881dd0b6ed5fe7c60cfce2a6.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    ab6bf75d2e6d462cd4ebcb59746a5811

    SHA1

    d13f1d68c517bf4a14e8ad504fe7a8d7b9549af9

    SHA256

    b3429c8f9f73312a4808a16ecfdd41797e796e4798c4ce6bf588df2b923876e4

    SHA512

    8b7efc197be414864bf30747ce52523b90d7037934fabcccf8e51fb0ac5c21cf058156f97eb0f98596dbea70de02761efa6839130063cdab79de8453d0a9822f

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    347ee8ccaa633cc81ef8a0895fe571d8

    SHA1

    1e49b8e2c039644247cae8e2bdb3b908d9697d48

    SHA256

    8dc4b84accaf9dac2ee23364b31c0ec996d2f8c407262631daacde945ecebcbe

    SHA512

    e54729b890aed8ad83d8f0a86526b40a76b6952283ee9d0a89f709a48ee123c71107ec7b266d1faa7a15532a43cf4ee4cf902b64541c9378a1c63f65b8f8c3de

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    db64ad85928fd7b51ab82400d14167fe

    SHA1

    b366af5f7aa3b8c9cd2492e7417de92979c233a4

    SHA256

    f16d8226c7fcdd03f58c975cedcf9ef909701fbd122ee543c96d67385f2bceab

    SHA512

    e18b40d79006fc964eb6f55bca446669e39c892bd6824eaa4fd004e8f2e11286b329fd55cebf71e58121579587a9ce6cbc68953b340493a39a8ca044ed9f97db