Analysis

  • max time kernel
    128s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-11-2023 15:58

General

  • Target

    c49c547c7f44b119ae52dfff4c93d63fa1f654943bf4881ff2b0efccf6074a6a.exe

  • Size

    4.7MB

  • MD5

    05a81c0a0331745091de534b2361e91e

  • SHA1

    75d18dab1f0608e27e47c2a4bf6b7782faa83731

  • SHA256

    c49c547c7f44b119ae52dfff4c93d63fa1f654943bf4881ff2b0efccf6074a6a

  • SHA512

    fb44e4f062c5875907c25d0efb83c56a1beb9b45fb9479ceb3ea6ab3d1c9589a63d6446521cca5b50756dd3644912f5042620a825acac9d9f4bdd2065a907003

  • SSDEEP

    49152:pFu0DxJ7eN9Fd8iz2prAbjf+yh2HZvj1Jf5QpSX95+r5u8QeKxFOJxdb4vZKVI:/DxJifFR2pEbjf4hHRQvKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c49c547c7f44b119ae52dfff4c93d63fa1f654943bf4881ff2b0efccf6074a6a.exe
    "C:\Users\Admin\AppData\Local\Temp\c49c547c7f44b119ae52dfff4c93d63fa1f654943bf4881ff2b0efccf6074a6a.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    3d426b0e05cb34fa24a66441efbcc5b8

    SHA1

    47fa686f2b1230781c85f91c105f82a041efef1c

    SHA256

    efd1b00cab9d4218b189ce93717122572200ff8d25edac9aa4282a2428847d07

    SHA512

    7d2c9dfeb5e3bafad158cf81038d9f0dd314e29af03bd9c8a5ffd347eda86269f8764818620f90c7d1b4b07eb66b585f92514eadb827fe019a498db18dd74b35

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    3d426b0e05cb34fa24a66441efbcc5b8

    SHA1

    47fa686f2b1230781c85f91c105f82a041efef1c

    SHA256

    efd1b00cab9d4218b189ce93717122572200ff8d25edac9aa4282a2428847d07

    SHA512

    7d2c9dfeb5e3bafad158cf81038d9f0dd314e29af03bd9c8a5ffd347eda86269f8764818620f90c7d1b4b07eb66b585f92514eadb827fe019a498db18dd74b35

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    3ee517dac147ca830b5ffb17fc26db57

    SHA1

    7207369a1923cec8d70190d4271d470b5097488b

    SHA256

    d267ed32c65bc66d558635f41cedbc1ef7e85a5f289d0234f2e2f468d271daf7

    SHA512

    cc5f6fb30adccf476d5091f966db8f83ca649c2a53aedf319f9d64dea6ea49c5d32034c7030da2570838eddf18474502ceaa633851726525bc6d48c73859be56

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    0f5ecb1028dbf4eb814faeeedf50e4da

    SHA1

    467578ef0df4583b524da522c979fbbddf11d32f

    SHA256

    19f7f2c0df66af6a05cb18d60ec4fb90cecfdab6c71df6247410173b69818a3e

    SHA512

    035e58978239cfcdde891bff0ca86ec5134618b3f93f50d28e2a5ee504ea3dc6339c2fb22f29a4d9089f84a9f2aea1ffe200f431ab5daa5f454a74fe244b9547

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    8754d2317b69a711f4e844f818916822

    SHA1

    93a5d824e1c1aedf9433dc2977ce3a3511c3347e

    SHA256

    824a0e391576fdad78b5427f9a0e0a175d6c79f68a566790de8652971c847d42

    SHA512

    5aac013aaad3e7512ca8c6d87b9fd3efc72d7b06890fbcc09529afe7180bced03c3d964277b1b50280b35fd50a8dee9e72b429fffb06bb8628cbccd6d8ce4190