Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/11/2023, 15:13

General

  • Target

    b3194a5deb623c98d37d66c3e6e726330b73faf51c17cb5a37a4f95762de1eaa.exe

  • Size

    4.1MB

  • MD5

    cae983fe395eb81d603269c01166706c

  • SHA1

    48055abc90d4b26ec98f252da8fe690eb68cf1e6

  • SHA256

    b3194a5deb623c98d37d66c3e6e726330b73faf51c17cb5a37a4f95762de1eaa

  • SHA512

    6063e96e934051f3ff2b12992a6a5d3654bec0f1872f08585dd86dfc09ed1bdf98b2c2dcb7f7054b6ad57348a82b65943ce782171246a1fccc7267f39c1e1eba

  • SSDEEP

    49152:Mb2XfWHdZ8BhE7K2dMaNpY+r5u8QeKxFOJxdb4vZKVg:q2XeHdZChmK2dRKdzOJDb4v+g

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b3194a5deb623c98d37d66c3e6e726330b73faf51c17cb5a37a4f95762de1eaa.exe
    "C:\Users\Admin\AppData\Local\Temp\b3194a5deb623c98d37d66c3e6e726330b73faf51c17cb5a37a4f95762de1eaa.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    f5986b8d613ba8c3f292712e469825e7

    SHA1

    5daff83a2d5e76a58dee233973e3acfb9952f880

    SHA256

    658f248a59334fb7b9c065890bfa76f2bbac11aca9809159b821033a957cd8b4

    SHA512

    29b4fc44b04be1e7825a570995001ae0fd6fc5db53ae043e70810cbf2ce961417b030f241e6130b73c04dd9e1880d20483d645f6a32453cc4cebb9ea67ebf212

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    f5986b8d613ba8c3f292712e469825e7

    SHA1

    5daff83a2d5e76a58dee233973e3acfb9952f880

    SHA256

    658f248a59334fb7b9c065890bfa76f2bbac11aca9809159b821033a957cd8b4

    SHA512

    29b4fc44b04be1e7825a570995001ae0fd6fc5db53ae043e70810cbf2ce961417b030f241e6130b73c04dd9e1880d20483d645f6a32453cc4cebb9ea67ebf212

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    f5986b8d613ba8c3f292712e469825e7

    SHA1

    5daff83a2d5e76a58dee233973e3acfb9952f880

    SHA256

    658f248a59334fb7b9c065890bfa76f2bbac11aca9809159b821033a957cd8b4

    SHA512

    29b4fc44b04be1e7825a570995001ae0fd6fc5db53ae043e70810cbf2ce961417b030f241e6130b73c04dd9e1880d20483d645f6a32453cc4cebb9ea67ebf212

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    3976aa5fb9e980874dcd3fbc4f862e67

    SHA1

    7cecffd9f53243dc1a49775c79b1c63d32175df8

    SHA256

    a6681db916a3a407a9d9f48a87b4d5f86fc2aa21a7cb6707c6a457c5dfb105dd

    SHA512

    4b7367659f53856114a4f2149415ce958bbeb3d043aabb46a7600f761b501a5c146d5545a8f18a6cb0e54ecee6a97b8f18f6a59d38e48cf6fbdde12f6f476052