Analysis

  • max time kernel
    137s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-11-2023 00:04

General

  • Target

    5b4de6aad2c7a3592a21d23c8936e2ac46926b2fc4e42a87890fe8939efa5f61.exe

  • Size

    4.9MB

  • MD5

    0a7def50af203b14200a44f385bd276c

  • SHA1

    928c9c3f28945ca9039497f42cf70a42fccdeea5

  • SHA256

    5b4de6aad2c7a3592a21d23c8936e2ac46926b2fc4e42a87890fe8939efa5f61

  • SHA512

    218724dba6cdb44cf7b4861b8c76588715bd479f6a10c1e4bcc6feacd60d373e64f4f4263226412cb1f3fc7f521604c8586241623b9ee27293e9ab675bd704d2

  • SSDEEP

    98304:4hQI4CudV8s3MJ279sA40aBKdzOJDb4v+:7bM2p+nswN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5b4de6aad2c7a3592a21d23c8936e2ac46926b2fc4e42a87890fe8939efa5f61.exe
    "C:\Users\Admin\AppData\Local\Temp\5b4de6aad2c7a3592a21d23c8936e2ac46926b2fc4e42a87890fe8939efa5f61.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    a4385f34ca4eed537e8a3a69254f8c16

    SHA1

    4991e6b6ad6a1a92c2d0cbaa7a3189a176ac9363

    SHA256

    0fed8564cff1c86e56b0d03e0f412bb929b65e111f4c2f5135fabd9852771197

    SHA512

    e8027f32d012b968955432a5b6f2722672202cdcd9b6d81f68630bf3fd6afcfb9afc7db3f4bb55e3844a2f48118953392e34246cc7f1513959622c3558469d78

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    6df9121b460f2f9e7accaabe297e523e

    SHA1

    7b62ab0a22956d9e21ecc8bd0e017859460d9413

    SHA256

    9160fd6136e47bbd832cf6c035774688d8fb7894367ae90ec196883520f73f64

    SHA512

    8eb3a6955080cffd29eba1a4031e9e88b7faf394cec5ad77c79fe441a841af330d2c2c89f84cc6b4e8c190948b0b7d4f173448286b89ea56bacbf5537e4fa584

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    89092f8db14cf612759cb4455b722c65

    SHA1

    12bc38179180c560106736d685ff68abeea5f9c1

    SHA256

    0f4f697aef37d68d612b1ff35501d3bf25b60954b7d4712ca377ab349a2e3b49

    SHA512

    b18feab62473c5b116519ac1a548b8c662ada884374ea60015d2980ed66eb045bb6799f3034747a9b256ea7ff772b9b97a13ea3abf4d0b4d0493ffc3e549c171