Analysis

  • max time kernel
    103s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/12/2023, 00:51

General

  • Target

    479d5ea7809dc2e6d50394bbe2a694bac68bad6ef7020587f504ead4281b6ef3.exe

  • Size

    4.7MB

  • MD5

    96a29d3d9fb81d3df34238757433948c

  • SHA1

    63332a977e4c92a5bea857452496eb5925ec53fd

  • SHA256

    479d5ea7809dc2e6d50394bbe2a694bac68bad6ef7020587f504ead4281b6ef3

  • SHA512

    e6cad4e8b9880373956b771733e0575ffedc5c66e08002c3d4567af1a9e7703f9c28f573cc21f4de1bf09f3c89b9e84aa03f5c86085c5dc5ae6a0fd6f7b481f3

  • SSDEEP

    98304:shIHjWibmorLobjYXzZpvF1Ff7PKdzOJDb4v+8lz:vWibmoFzZpF7SwN0v++

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\479d5ea7809dc2e6d50394bbe2a694bac68bad6ef7020587f504ead4281b6ef3.exe
    "C:\Users\Admin\AppData\Local\Temp\479d5ea7809dc2e6d50394bbe2a694bac68bad6ef7020587f504ead4281b6ef3.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    1c7bd5545c28679d09d091faca75cf18

    SHA1

    805b342e492aa7df99dc23fbf6aad98b6a40183d

    SHA256

    423c4fb311f9145b81a008a1b39ee441d3c2c7aa92144661caf72874ae943839

    SHA512

    24954577f92c9a14a94e9a9575a8b73f40000a30f281de2180c976ff6ea5bb2fbcdb72d4044655c5fe3c9892904d4eedfc626ddcb96259d0af5d45b75239240e

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    2484cabfa3416715924ed1cb85b29e50

    SHA1

    64648228a7e1e6fe2b89a5d00ae690e631a346ff

    SHA256

    a1d7a5d8327b86b9fee05293468b7b3426c9329705ca637d1e39b0e7c13369ea

    SHA512

    0f41c3097cec5413ce27806e655355dced8b62b4f775859307415eeeecd1121b0f520bc28235aa126888947ff1890d69cf3cf4b1888101fc2fa535f2965e282d

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    d3400e136cd419c860344a0fc7a171d5

    SHA1

    7e29a59933e7814348346282612f2d01e57b0a9e

    SHA256

    7f79c5c49d1feef9cfc602e19c4195ff4dadc6eda57ab2fa90aa50da79177e52

    SHA512

    96a53bf3e8509ed477f1af44fa5ba7ba3ee8cf2379b42173e42a372a926f3f08578cfc55c1ec92591ec142f99bf6ed7494baed94eecfd99b8123042dbbd0b3b7

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    1a4b3e321014aa3336403c20307bd40e

    SHA1

    85e1f5f99a9dd38bb7380d27df9bce40ddd2886b

    SHA256

    630f79612a550824772b2374ae1199eb261f97c0cbdb8cf779500e2171346877

    SHA512

    0806a05d00949bf6129b0bad70bfe86a9fac4c86a24585241a179f51b3fcc13627e7d7e8a6ff57586d70cd93c7b3278178876bc5218f9671bc4959f066c39211