Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-12-2023 20:52

General

  • Target

    79537bcff588985167094e6284b60cb657c619c9184583c8a96cc630ff1c999a.exe

  • Size

    4.7MB

  • MD5

    293a4815b2444c7dfb5e0c2920844e9a

  • SHA1

    2d9613a579680edb7cb41d69321b69c040d50740

  • SHA256

    79537bcff588985167094e6284b60cb657c619c9184583c8a96cc630ff1c999a

  • SHA512

    c940a3c7c33717d4cb8c7ab0c98633aac45864ee3f51ce44afe2319e5f21a494cbd5df3d57f994539b54431799aa34708985deb2bd7427346be6d821a17614a1

  • SSDEEP

    98304:shIHjWibmorLobjYXzZpvF1Ff7PKdzOJDb4v+8lz:vWibmoFzZpF7SwN0v++

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\79537bcff588985167094e6284b60cb657c619c9184583c8a96cc630ff1c999a.exe
    "C:\Users\Admin\AppData\Local\Temp\79537bcff588985167094e6284b60cb657c619c9184583c8a96cc630ff1c999a.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    a2fa3beff923d767dee630e3c56fe7ec

    SHA1

    413238349293697fb02494b4bf8dbd79be93f84d

    SHA256

    55ef4c38632373dbf5332c21154d9fe5fef4ecf2198b3726eff45d355d77bc79

    SHA512

    11b5f349b859ba052b03203338bce1ac62c51e0a456bdf7c0cb3a9463a45da4caa8e7d75bd12a8ca2107cfe3f611bdd95bc783e40203cdd84c54a8632de67e61

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    05dc198697f1b517d578d30434707f45

    SHA1

    27b9c33b8369b327dceee0b6ea8f3fb574671a38

    SHA256

    dceb8cbb8895cdf03fe2d37b786ef93c703bd440b7aadc6bf252def090fef723

    SHA512

    5d0cb228019a2bfc816a3cbe1978d682cd2358817efbd25a8766d6e85d52854aa8b70e0c35771aedc7f49ddbf908c6a8b6114209b5350c201fb012b94ee98807

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    a73570e4c06294447340577add3c38a7

    SHA1

    404a753df52eb66f249af000519522353582b83e

    SHA256

    46c0196508e6978c0c3ad1b28ac2ec0311dfc49a319233685f4e5d06b5c80262

    SHA512

    d2085c97f2508af1e6136da976a3ea9be005cfde278cad95461a6714e56cf650a9b6e7d0c0922727cc5c3dd6f4ce9a8f430d0d9621d0a59f4899f307d97c178e

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    6d2e1c54be3ff2c732891caa89160030

    SHA1

    e7d461fb3fab12908580c01c5536844ecd6bf56b

    SHA256

    7eb5bf8e44d88a8ad3e2f6ab249505c91e34cdcaa0f97a9b08a65aefbef2e62e

    SHA512

    f2c4cc3ad47087afc00fffc1ef6c5b10b40e86d49c7ace73c77fdc3252e35bf8036e61b1537f6200ff65ec1aa3e0af22e4612094c2ecc6297ef1c5cf9f5847cf