Analysis

  • max time kernel
    99s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/12/2023, 11:57

General

  • Target

    eaad4ca192658c5ca0f3b44d43253ab9d779241452b1a0b8151ff1f14d697504.exe

  • Size

    5.0MB

  • MD5

    75896d46eb7b28dc62c9007a24185881

  • SHA1

    b6c0775199e7afef321b4c67332c201bb3da45d7

  • SHA256

    eaad4ca192658c5ca0f3b44d43253ab9d779241452b1a0b8151ff1f14d697504

  • SHA512

    9bac20181e04258dd8f538e227a827dc9e2e34eee24823a2d1516540992496e2aca156f49c9afd3b0d4311d5dbbb8c68446dd806e74319854a32761084130b94

  • SSDEEP

    98304:zgu9llk/yHwNf3n48LYtQMKFfikjKdzOJDb4v+6Y:rllz0Yt506LwN0v+6Y

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\eaad4ca192658c5ca0f3b44d43253ab9d779241452b1a0b8151ff1f14d697504.exe
    "C:\Users\Admin\AppData\Local\Temp\eaad4ca192658c5ca0f3b44d43253ab9d779241452b1a0b8151ff1f14d697504.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1920

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          1KB

          MD5

          f1e2383d3cb8a47ceb9fffbbe2753dce

          SHA1

          6eb5c22b6663a5ea1f1e89f01c4cd9f168b955bd

          SHA256

          6028f9361141628d7fcc88c0e651b7bd844dc04f8822cb0a8c1e17a4691a88dd

          SHA512

          86e07e20bbeeea89f052f342dbf04ee965a4407ec1272da47f42dc215e66d2b5921fe65196f55849aaab5be6011fe5040dde9af02fc67d75b550d8e9b39fb242

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          5KB

          MD5

          958175e9e2663d900f0a0341097cbc3b

          SHA1

          d27497c2a429955b81ed7d7b5bc5732035f034b1

          SHA256

          4af29b648a183e90d010b6c2edadd8fca5c5f57fad3109cde677acb08b6632a8

          SHA512

          4d90cfa9e78823c19ea9b1109b1215e6a9d7b1ec285e197f370c2fbc207a5248651ef3400e6a4cb7a28d1da68328428f2cb4624ce8d52db972e4095cb5b80ecb

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          7KB

          MD5

          57449e6f5b53da1d32eb3a0639021394

          SHA1

          90941e93ae6a7cd17759bd327f5d46789566b011

          SHA256

          dbba5b6402671a4c286c0cc494ac40f2541eee6ec6b29544915538faa2b72556

          SHA512

          77e2c33ada83ccbcabe977b963d40d21e60b56b708043dd6e412e892cda426753c0b62c92e676a848064e6d920114f94d4e362315dca0707a915f7aacfcd062c

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          468c0b65bdc1c3a1a606369d005a7ee4

          SHA1

          ebb9f8ca962f38d9b356f1167b41fcc7864140f2

          SHA256

          abff0be783966a8288f6d0d1c99bb4e8aec54197e9edb625107f6e61d5b49b9f

          SHA512

          1f5fd58733f4faed62eb45b0b49be66f18906c4afa958e815b34a1b2daf3fe67fba84fd8a80346e1cad1d016aa1dad17783dff9eeaca0676f5870587274c3111