Analysis

  • max time kernel
    144s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/12/2023, 13:48

General

  • Target

    20d386aba16e276e082b09075c0c0d1295bff1bf92730dbd991bfaa1296f9a09.exe

  • Size

    4.7MB

  • MD5

    3c3bf0aa3e4ae7d41d9ea3420c7fa690

  • SHA1

    4597ced3f25dde00307f247d2890bb6eeb830f73

  • SHA256

    20d386aba16e276e082b09075c0c0d1295bff1bf92730dbd991bfaa1296f9a09

  • SHA512

    82012b66f8beb8133c9b12007223489893e911a2946f747733cbe46969eea344c3aa21216baf5fa297c9d65dd8f915208df48f5405d386494fbb1098f3444b82

  • SSDEEP

    98304:ZhIHjWibmorLobjYE08GKdzOJDb4v+zlz:GWibmoZmwN0v+R

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\20d386aba16e276e082b09075c0c0d1295bff1bf92730dbd991bfaa1296f9a09.exe
    "C:\Users\Admin\AppData\Local\Temp\20d386aba16e276e082b09075c0c0d1295bff1bf92730dbd991bfaa1296f9a09.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3972

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          4KB

          MD5

          39212c0d6027f637f5e72b0a41b5b700

          SHA1

          ba9786c688e845b8a70220365899e8427a52b763

          SHA256

          37ff2543892421f33ebb6f67e0c18bf89ff58979f033d478e3f33550b1f78a01

          SHA512

          5f0fdf355392979175b9b0afefc32b7d53a800226ea7e4d0a281c1a696ee0d566a7856660af50540b6033651fc9276d8c5fd08fac0d3377c876d8b943dc1064d

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          552a77831a28b5a1bbef767ec21c60ae

          SHA1

          e9ab96f119d89c60c99796ae011deb8bec769b04

          SHA256

          d2e2104ded5d7ea5963ef991ce4907822fdb9cd85cccde35e899bf4f7242cac2

          SHA512

          09958b137a0a7ea00705f30094cbbc166cff567c17cb1aec81c624b03ca07b12dbf7e4632f8bba345092f7f60448b71c05db3e63311e174515e382415b882c00