Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231025-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-11-2023 16:07

General

  • Target

    ffa5c83e4350cd1b12d7f13ddd3c7535ec87e28f7837e7b7eb6649366d3e99e3.exe

  • Size

    4.7MB

  • MD5

    52b1dae52f89be07f2293fa34f0577f3

  • SHA1

    b4dc57a04d8997846bcffe901fb3c2f50a8c3242

  • SHA256

    ffa5c83e4350cd1b12d7f13ddd3c7535ec87e28f7837e7b7eb6649366d3e99e3

  • SHA512

    3fba2bdcdeef730064c4d38ac03c7cf4de09ce4efad33a3177e9658bc9dee8f21eff8449b49598a29d3715f349ba984ffb53654b7a95caac229da149e9dc3511

  • SSDEEP

    49152:pFu0DxJ7eN9Fd8iz2prAbjf+yh2HZvj1Jf5QpSX95+r5u8QeKxFOJxdb4vZKVI:/DxJifFR2pEbjf4hHRQvKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ffa5c83e4350cd1b12d7f13ddd3c7535ec87e28f7837e7b7eb6649366d3e99e3.exe
    "C:\Users\Admin\AppData\Local\Temp\ffa5c83e4350cd1b12d7f13ddd3c7535ec87e28f7837e7b7eb6649366d3e99e3.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    b71dc00f2a62be6a12991c700d8a1b8f

    SHA1

    e70d1e288382ca08458e1c2ff4938b8315475b4d

    SHA256

    726b227251a84d37d57e57a331d7eaef1d36eaf87dae112fd6b723a24b365953

    SHA512

    abd3e9d22bbd1338594de5d9997bda0a5e5ff58782f2246e460bc7a41aed497916add7f077d1944558a4d89afa4a86246c6c7e48ca6d944d9ccea841c5538c36

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    2d2ec410ddf4c03d31a2b5f9926beb3e

    SHA1

    f7ac4541d9a8712e2210737142cc5cc732552a2a

    SHA256

    c5ef6ebb6ffb016ac024764921ba6d13825732f17d09ccc5bde253bcee23739c

    SHA512

    70f7dc3bfbe76af10dacb9c57d80e0554f356e284f5450ff3671c927b6a4740eaa08270af7ba0350094491ef670dc43cbbd57ea675ffe459e7f9a441032198c9