Analysis

  • max time kernel
    139s
  • max time network
    169s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-12-2023 15:22

General

  • Target

    8246e45ab00ef4bcd3f5f525684b656dcee2ad7c9642fc04eb07d897616f4bd2.exe

  • Size

    4.8MB

  • MD5

    4812e3629f2ac215f2524a1fc04d6668

  • SHA1

    cdaec3e5b0c6a585a7fb265c5a6dca411850ba97

  • SHA256

    8246e45ab00ef4bcd3f5f525684b656dcee2ad7c9642fc04eb07d897616f4bd2

  • SHA512

    ba3f5b29e044fa1b369a69b620881c3cce841654c0b51e0039d67e65b5946c512da3b94e96a9a3f7712a75fc6415e007b2b7a7b87d78cd5868db75ad70649dbc

  • SSDEEP

    98304:bhIHjWibmorLobjYsfwXmKdzOJDb4v+Ylz:QWibmoay1wN0v+S

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8246e45ab00ef4bcd3f5f525684b656dcee2ad7c9642fc04eb07d897616f4bd2.exe
    "C:\Users\Admin\AppData\Local\Temp\8246e45ab00ef4bcd3f5f525684b656dcee2ad7c9642fc04eb07d897616f4bd2.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    0e58e96ac9f0a8859625339fb97abd57

    SHA1

    9f440cfcd4374e73e712b8cceb94f11e8bb28aff

    SHA256

    7bee9f2bfffb26496bd3c8b347e9fb71a1c2729002103fb3b32f5be4497099e1

    SHA512

    1490061813f60ad5c138b8d2d4b3186cc4d8bffa582f743a3004f8830354035d9487ed2cc859cabe8031f0287ab5cd460e97bcce7dc2e169146bc398470e6085

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    b3011f97416932ba83d52ea982c14fbe

    SHA1

    4fb5e9b841a30800b86480b59d3e693e2e5bc4ef

    SHA256

    1c18f209b08e00d70fd46f933c2002e0c9271857f31691dc3fe418c2c2cffa44

    SHA512

    6515d7caec75aa105708d23693b8d35c2b370367dc25300a3d1f86727c3ca5e9c15ecb959ebc2f60eee2c1c892ec934f3ba2ea7942f3f117816970aa8284b2b8

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    a7eeab3db1193e2fe0565dddacdb08af

    SHA1

    6ed8095c56d5636e25ecd029c4916f6aabf6e818

    SHA256

    a746a64189f44976cabf05fd7c6ebc0480095e120bb7928fc87c190ea985fbc7

    SHA512

    69295bc0b1a3a430e997622469bff76959e1cb8c47005db10d9840a0388e190119f2aea7e2da361e77126bc7124c76d766d9fd64c2d4c3296803c806a0db8953