Analysis

  • max time kernel
    138s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-11-2023 16:04

General

  • Target

    0b9afbb0440ff8936542e51139463481e9fd7b208cfd8fa371c4c7f5ca7f4726.exe

  • Size

    4.9MB

  • MD5

    e890d096a2a9148da1db19005e15e3b9

  • SHA1

    4ce51ac987972da8653d01dec5de81b39c81a2df

  • SHA256

    0b9afbb0440ff8936542e51139463481e9fd7b208cfd8fa371c4c7f5ca7f4726

  • SHA512

    70901305c925ccc2ffeeecc15fe5d6f3db65505463067fd81b72373f58ed1110917f23f6f378033be85bb1e55692b57f5e06616bd93c823c17fd830f08062106

  • SSDEEP

    98304:4hQI4CudV8s3MJ279sA40aBKdzOJDb4v+:7bM2p+nswN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0b9afbb0440ff8936542e51139463481e9fd7b208cfd8fa371c4c7f5ca7f4726.exe
    "C:\Users\Admin\AppData\Local\Temp\0b9afbb0440ff8936542e51139463481e9fd7b208cfd8fa371c4c7f5ca7f4726.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    f49f4397401c0c70fffb5bc87496457b

    SHA1

    fd76944c1644c8ca660404765c43373bb8776740

    SHA256

    472246e6a77e3384c3ab9fca34a5028363e1177c43c181189cc1ef22fe76507d

    SHA512

    677106965d0ccd011b367d5ae737e6da196bb2612a610fbc435f581bbda7072119af28708b37287c3f2ef28c2a28a3b743cf2c55e1fb67c8aabda8a6a2ed1684

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    596d613828c6bb9312a1b2eb079f4a67

    SHA1

    2cbee07b9416ec9768e0caa5994ed47d6833ebf3

    SHA256

    981429614eac26edd195af7a9bfbe688d7cb20abb633ffce01d6797edd52dd1b

    SHA512

    7d223616566d8ddc92ee1d39492f9b314be20470902abfbddc3c7a6929680c4f6de3e0bc3a73f3aeb6ef8aaf45478885962a931b82c0a1c2d223c59a02319280

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    596d613828c6bb9312a1b2eb079f4a67

    SHA1

    2cbee07b9416ec9768e0caa5994ed47d6833ebf3

    SHA256

    981429614eac26edd195af7a9bfbe688d7cb20abb633ffce01d6797edd52dd1b

    SHA512

    7d223616566d8ddc92ee1d39492f9b314be20470902abfbddc3c7a6929680c4f6de3e0bc3a73f3aeb6ef8aaf45478885962a931b82c0a1c2d223c59a02319280

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    088e14bfff97582d45df22c41d4be7f8

    SHA1

    fe319a6a9ec93050ca217305112f26f274398d8b

    SHA256

    45941605fe9a82b4c192bcfa830edd8474c46cfc2dc79c065452c78bd834f201

    SHA512

    443a6f5e783513036cbec0d113814c0c7a3dbe3425468b921602b722f52f9384befd9480b11a4a5d68c0d82a0e227900dc15b1eb557348f2a96ef6096eec0b45