Analysis

  • max time kernel
    144s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231201-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231201-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/12/2023, 02:56

General

  • Target

    f5da0c3cc1b0a274a2142f3b793f06930969467d00457b7a7b291fefd7bed9a5.exe

  • Size

    5.0MB

  • MD5

    25b9653b3714824703b2e2de204385a4

  • SHA1

    0ec6982b0e0c79e85a14a5618f23d587ac05ac57

  • SHA256

    f5da0c3cc1b0a274a2142f3b793f06930969467d00457b7a7b291fefd7bed9a5

  • SHA512

    6f3675795f6d8fbd3a98aa5c138bbaae3b0bbe56f34525b8b0db04d9eaaeae4a6049b011ad8dc8b3bf5e4e351eabd1944eab5d0e845b15a070a002b18698033a

  • SSDEEP

    98304:AtyRBG5iZwH3MIdRYtJ+mI0KdzOJDb4v++q:0KIbYtc7jwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f5da0c3cc1b0a274a2142f3b793f06930969467d00457b7a7b291fefd7bed9a5.exe
    "C:\Users\Admin\AppData\Local\Temp\f5da0c3cc1b0a274a2142f3b793f06930969467d00457b7a7b291fefd7bed9a5.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4156

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          3KB

          MD5

          d8983dd1ff403176fe7269aff1034819

          SHA1

          8e5588ed9ace649222ab33fd0a880a225aada4cd

          SHA256

          feab40156276d60258e1e9b72629c84ce01888e8e24bc1eeed126450dbe36f54

          SHA512

          7747a59069798a1e79762d15990977257f7177d745023140ed40a637d3a6d493f4626c02e94bce470a58570fd8689434cc52567e8c29387e3cc24758bd9244d9

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          4KB

          MD5

          213bcbf6c5f53766843503d9e75be8f6

          SHA1

          58612eb550c778c3e89192ded90fe472b6f89a26

          SHA256

          3bfcf3fd801c7ee9acd861fd4d6ea4bae24435c211a81554722dd5940c7ff79e

          SHA512

          493c09420a9a51d37b05b9b68a586b7856a9d45ee27699886758add1b40704366a1e20247a040a9251fa27eb0b8a8fc447db3e6db119b68acd0c0133b1c58f5d

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          6KB

          MD5

          8c2c9b5a463b043cc5efb5a9dfe81045

          SHA1

          f4854ca6368f42a3d21d99559dfe0564cce93a43

          SHA256

          7a7e9689136994e5fe1958b11eaf70df5c5355052e4a63a781ce02bda4e93d54

          SHA512

          e0f24380aa038a5e67717ab47ea118607c8d10669bc5024e85855e2a1f52534422c668069985d81a377689199eb71fd66bf979fadbb7b6c51e639c38f597f3fd

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          e2ac1da271229e6c92d7f7054bdfed13

          SHA1

          44dbd4a8298fc450b3406c67c300f10c55e8eac1

          SHA256

          9dd609db7d683a9aa3f033c4242e6fba600d8eb83d3739c7787277e7ecd8a608

          SHA512

          0b755e10b4121cb52c1a6e088d4ae82143bd88199b93da703442064aa289c33b774bc32c1ed44bc5a86bf571c44157086a326f0570ac0d8522880c8745344ea7