Analysis

  • max time kernel
    141s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/12/2023, 09:46

General

  • Target

    6c21c7f612d66702bcf0bfee7e11415e677043ccbbafe45f804f1be910d0ae04.exe

  • Size

    5.0MB

  • MD5

    0fce12e8881cf59211891d6d8041e9e2

  • SHA1

    dccbec5bcc6ccf94790842556d9480cbea3fa3a8

  • SHA256

    6c21c7f612d66702bcf0bfee7e11415e677043ccbbafe45f804f1be910d0ae04

  • SHA512

    25a044be214c7df4367127ab5337dda4748ddda70bad9a226925b1e81700a77ad244f0410a45df7e936dce95cecbe314f47870bba8ba54c3d3f66bb5eddc2a75

  • SSDEEP

    98304:zgu9llk/yHwNf3n48LYtQMKFfikjKdzOJDb4v+6Y:rllz0Yt506LwN0v+6Y

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6c21c7f612d66702bcf0bfee7e11415e677043ccbbafe45f804f1be910d0ae04.exe
    "C:\Users\Admin\AppData\Local\Temp\6c21c7f612d66702bcf0bfee7e11415e677043ccbbafe45f804f1be910d0ae04.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4496

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          7KB

          MD5

          9089fa9347f93716bf4ef9776cf919f4

          SHA1

          e2048f30e6539c1759722f1076f1dc9c409f818b

          SHA256

          bb41aeea2d93317c3b815fa2cc60fde33d4602da3f72c9aea07589fd6297546c

          SHA512

          60dfefcf2d0f6b271b9fc5a38786ba1323cbbdfaccca29af505ddf23f8bd4329caf34e57af48b5f4684d7ab43fdc706ad5712c96efa85b41dbd70338b46b6c63

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          aa384ac8b8f252cc23dc743e5a900361

          SHA1

          7cbba2ba213580bddd2914fb3ef261acd7d5eb30

          SHA256

          36107fca40d373e978053df8e64d831dceb197de019f6ce129186ae2beaa2e79

          SHA512

          2e679737df6031451b8881db34a1054f711042549311e29b56bb358712e446b2709f108011d8035806053c946ac2317d5b1f1e5a2dbd28ff4bece8bd0df108e9