Analysis

  • max time kernel
    140s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/12/2023, 09:49

General

  • Target

    cc71dcc5eb69ed1f28c92b06c02b2da791f45c09f704e089e5b7137216969d49.exe

  • Size

    4.7MB

  • MD5

    67ae557cd4ca04d7ec219942a88f68a7

  • SHA1

    e0cd5f3273ce4bcc24c7a742cbede6b1bfd2ea22

  • SHA256

    cc71dcc5eb69ed1f28c92b06c02b2da791f45c09f704e089e5b7137216969d49

  • SHA512

    524432849a2495fe24aba3164f320a477e6e1c25a10e6c22091477025669f7f90939a66f67f58c0b96a1957a7ab77412ae37791fa999a53faaa91567e0c4a238

  • SSDEEP

    98304:shIHjWibmorLobjYXzZpvF1Ff7PKdzOJDb4v+8lz:vWibmoFzZpF7SwN0v++

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cc71dcc5eb69ed1f28c92b06c02b2da791f45c09f704e089e5b7137216969d49.exe
    "C:\Users\Admin\AppData\Local\Temp\cc71dcc5eb69ed1f28c92b06c02b2da791f45c09f704e089e5b7137216969d49.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    17ec40d0fbe6c05b9f78dbffb2a5abc8

    SHA1

    2947f282cc48550d20230ce6e9f17eec0e82894f

    SHA256

    9213115a4629e989d1335054f9662ba11c7a1e9aebed869664988c2144f0cbbd

    SHA512

    f1c670afd3d8a296b869d09c1f7e74faee63d104ad44a937eb4eb4c39f2d10c88330348131af5034412d6940dd0abd30bd7a935dcf2b8f50c3c101ccf561be3f

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    a7e66760199fc2f401ecb586abc299dd

    SHA1

    9883a6bea64b668bef766af48ad1be79aaa92166

    SHA256

    066384f548aa39acd2ba1d72a4d053fcad4e611a57d7a138c70a91805051a2c3

    SHA512

    6dc6630f2cde5228012100f14866b32b3e80c250e84b213d32091c9fefe3ce80adde596a1df0b251bd6bf137d0c1a5ca2ed3d3531da8b33fef39ccf8db974911

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    b82fc6f702b8559efe60c500d80784ef

    SHA1

    8958def6f9548bb4eafe6ee360c4e71c536b9d4f

    SHA256

    59af8a0773a9079c5f308c9da305bedceaa7910e926ab530240758e99c2cb1c7

    SHA512

    deaecb8287ed8803c4e19c9e90b75e94dd601b543f3f2db4b6fe9b686207b7bd57dbbbbc7b8fb09482a1a110a090db65bd6119d62304d9bbbaee4e22556d5994