Analysis

  • max time kernel
    153s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/12/2023, 15:54

General

  • Target

    1e026d99e36a4fe9287f5f9c1b92d3d56f75fef59c98806a1ac83537d45c4c71.exe

  • Size

    4.7MB

  • MD5

    4d76e1b42d1a1ee6b54b0ecce35e536b

  • SHA1

    bf5d2fe2653576cf0b5c0fd0697e9f7676b492cd

  • SHA256

    1e026d99e36a4fe9287f5f9c1b92d3d56f75fef59c98806a1ac83537d45c4c71

  • SHA512

    e0fbeb678333117073beeb0f46b769f8b76b2fc0abba33a5dea33958af63a20bd05d197fc50a920c30b36fff956c7d998ce6651b1904acdc2e12e1cf013eb7c1

  • SSDEEP

    98304:ZhIHjWibmorLobjYE08GKdzOJDb4v+zlz:GWibmoZmwN0v+R

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1e026d99e36a4fe9287f5f9c1b92d3d56f75fef59c98806a1ac83537d45c4c71.exe
    "C:\Users\Admin\AppData\Local\Temp\1e026d99e36a4fe9287f5f9c1b92d3d56f75fef59c98806a1ac83537d45c4c71.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    2KB

    MD5

    d2ab2ad3fca3dd42529f66e70781a075

    SHA1

    0a090baac58c993ec9174c31ad8b59ddf969129e

    SHA256

    19b3df5ddb141894851b45318646fa56e7f843a5c221284ee83f85a6b0571d21

    SHA512

    bcf569fb8fab917b9c6dddc20a82aeca2590c79c6ee1f6436f5cdb9b29ea0b6e5c45a663349053936a87f6ef42167bd67f4318ff07ead0d01e2af12b91bd2b96

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    7348daed266959d17da19a38431909ae

    SHA1

    e06021ee63d3167a71c0e62f1b913b13f1c3650b

    SHA256

    daec138843c8881fc52b7cdee793dd1a2829c4dfc0c18f0151ef41a9c53b0bb2

    SHA512

    a697a56e6b7d8b613215e28aaea557636309fa308694d7ff7f207a6ad5416071667a2a58c8d16af3f666e443ce0b50ef4dc4937635d025b8e55c958a0f0b29f2

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    93e64bb1ad3d952ee380b06468b74b0e

    SHA1

    f6b6de1b75594913ce0513c651151f87e4aea0da

    SHA256

    358862582a260abf372d91be49d48d47bc13c1a9a13f8cce67e5807ba45b8e9b

    SHA512

    7af7f63ee57b8abeaa2419e48bfc8faf56c53486d60413b796d895b993d8996af9d448cd10ce6dbc8ed9634b8f449832a57285d169df13abc5f0246884e8a1ee