Analysis

  • max time kernel
    127s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/11/2023, 21:03

General

  • Target

    ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313.exe

  • Size

    4.7MB

  • MD5

    c7666ecadde09b2494f51375cb0b06e4

  • SHA1

    d4d1af37283e28ce0e16c1a35540bd423506124b

  • SHA256

    ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313

  • SHA512

    62d6c372ab02eba5be6263a8176c8f35f7605c1143404fe26f3acfb356553c46707377048e725dc8e1e67b7d91f3abe309f185dfbc87b9850601049e93d0e813

  • SSDEEP

    98304:d2XeHdZChmK2dhsD6F3Y+IUKdzOJDb4v+k:BdZL3jIDwN0v+k

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313.exe
    "C:\Users\Admin\AppData\Local\Temp\ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1556

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          5KB

          MD5

          1994c13124a83f72a9fd6f436d6c5b33

          SHA1

          dadea203c880f207b09c34468484556b02438390

          SHA256

          1a7d60cc0bcff9f41a558a1215053bb53497343f99979721b4d3c1a59700a612

          SHA512

          b72433c9b5f55a8899a42ac1bb40efb0668239f0867677e495bfd51d86a1d6f56f128876106eb408239e598fcc0fb6b57128ad94a5fb43dffb5d5cc4b148cb0d

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          6ad69e65e16bc4e18936eaf3e19c2343

          SHA1

          76a522f6e5def38b84ab068fa1bc4e3eb319e499

          SHA256

          0348a143723b6e6cc7f82640b6b38733ed2b975db9173375fe2f2f26470a43ce

          SHA512

          b19c2d4f097e1241da6b61a8fe7cab914d68653ef8614c610d8f20cebe3cbe1919de660badc6a349bbf3b755ac88ca5cbed2accfaa94a0473b1f11c1038e4799