Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2023 19:14

General

  • Target

    ad38be0b52123393e7f2d1b42b25621c5b8ab5c96097736b308d22fd97dc27bd.exe

  • Size

    4.7MB

  • MD5

    3ee3c96c77db9125f739acba8161fe03

  • SHA1

    4412e60d74864b12cb7b382e4785baee60149f4d

  • SHA256

    ad38be0b52123393e7f2d1b42b25621c5b8ab5c96097736b308d22fd97dc27bd

  • SHA512

    7194d4fbbf9e441d3d4115696e258fbc50131698ce151346d92d13de523c502b079d847d56308bbc505f7cad7110311892c7a07de72c24829f1e65f294e9375f

  • SSDEEP

    49152:xb2XfWHdZ8BhE7K2dM3Jqfmc2jRAjY+r5u8QeKxFOJxdb4vZKVI:12XeHdZChmK2d7eRR+KdzOJDb4v+I

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad38be0b52123393e7f2d1b42b25621c5b8ab5c96097736b308d22fd97dc27bd.exe
    "C:\Users\Admin\AppData\Local\Temp\ad38be0b52123393e7f2d1b42b25621c5b8ab5c96097736b308d22fd97dc27bd.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    3a2899bf70fc71d11d1c814d4ea1ed7e

    SHA1

    879907f5c0fb182a1e704432a1d2e9f1e1a5eb9f

    SHA256

    63e93ff2b38fa4eca020c00a9d172359a8588498eac05d1b803a286975a32c21

    SHA512

    ac57562327e3c51d5bad5d67631b0cb43bec28ee556dd3a2fb1c8d499047eb7e64d02bf8ec4ad7a0944e472052ad71a67642e5f6f47cb198b0759f4c38149d34

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    8ac062edbc151f5e88a3241920298150

    SHA1

    f00333232be80943b93d57d0053d640e57fedf6c

    SHA256

    919dabe764a393a0b4e01dcb1b46d5c8d2bedc56e853d345892b9ce6720724d9

    SHA512

    941fae6afff53ebe915195abb840c26b53d067fb2f74863ddd82140ba042ea7094aa3a2c6d5b7ac2994faa0d06ca962525eae0d14293326fc8972ec0bf3dc8b9

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    fc0e2810558046b03e443cb2459e1256

    SHA1

    6abedd7777735b999be18ef9b2eab85a29e7f130

    SHA256

    c472c27e317e4bac357bd2d6dd94bd07ac5ec3f9f79cae0e9dc2dabce9063e75

    SHA512

    3f2154240d0dd7cfbed740052ade5a89bdc31b9d2c0ba6d3a69509b7596680bec8b4bd6dc4518a1bdcfc60095f7a52cc27da701c0d4a0f6129c1e81436b18571

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    291a50a39c9c0d43b6c7f0e4cfa4593e

    SHA1

    f546ce4b697f2bd2d2b2a30761cc9d0e8f164c71

    SHA256

    e258c55a7e6a57a837d26744d81a722399db9754c0188614faa15920b1900866

    SHA512

    7686aa7e0ed0cbf32b5fb3f40a5800f1d6f70ce7f9ce1b9bad65d4f70ff1513b8e180aad7950aaafb093758c718e92da66c6a0302c96f923f09b0a4b0e4c68b4