Analysis

  • max time kernel
    93s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-12-2023 06:43

General

  • Target

    0e16a97a89c958c488c44a490d46286b58f2b22889d214c88476d197a8dee394.exe

  • Size

    7.5MB

  • MD5

    d16111684ffc8c3aead322a81bc94fab

  • SHA1

    5028295351a970fd1da702f1a76ab013e9d90b58

  • SHA256

    0e16a97a89c958c488c44a490d46286b58f2b22889d214c88476d197a8dee394

  • SHA512

    eb3b1c3c94493eaa618c85104d410de0af63f45a2e8ab66703644f6dcb7d28b2f5e3519fbca3379471d23519e28b983d4cc0d29c2a3f66d8be51396fc28a069e

  • SSDEEP

    98304:5Bgn2qZd5Gr5aLTdAmfcXID954YOh8NbFPCQwDfWw08dGODav43c9NO:SZd5sQcXkL4YOeNly7W38NDaW8NO

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0e16a97a89c958c488c44a490d46286b58f2b22889d214c88476d197a8dee394.exe
    "C:\Users\Admin\AppData\Local\Temp\0e16a97a89c958c488c44a490d46286b58f2b22889d214c88476d197a8dee394.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    bf93fd806b6683bb320bd178d767f829

    SHA1

    7dd27a93532f9ac6a24c69026f19aa8def20b166

    SHA256

    a4c275669513ebb1086fe92f38e31421a55c0b94bc0af2ca7a7eb5f029566076

    SHA512

    8a461ca05ca7340b5a448c874bde02663f39cd27042e526f75500771c1303964540df0fc967ba9b1b612909937d58a526d8b56a482843f726aafd8e707647c30

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    5f0d9fa1fc95516586692fea572dda31

    SHA1

    fb3e7060f0bfebf5582bf5b43104549d76ad7c16

    SHA256

    d7688de1d50b70763b6d64bc887bbaaf4e8ce08067d72c28e3bb1df75e8f79e0

    SHA512

    534edd3707443f9c246c3fe44c0c239d4a8ec35dbec01510bb9b9d54e81fe92e8baee6363aa35fd4813ae51d751396e78a511865413dc4f6c8e70cb73445f45e

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    1904c4eb203e385acb0ea4300c3cf366

    SHA1

    8d5429b7e88787cee08606c4732e05491a5e58f7

    SHA256

    cb713e82253c3154b72266445cdb7959ca9a7811ba89020ca76ce980b59f5268

    SHA512

    febcc778158b7e8d8290485f2d4a343c37b5fdff79c86ec407fae3fe1f54a2e7532d980c8445f5fa6a29fd2c737f20b56e7aba1ee6c325a60b9b9426b036f920

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    805ad5ba1ae035ce5872e88f7c5ceddb

    SHA1

    3937270eda2198b8b6b5f7a3c1973023161cf479

    SHA256

    6c8c6e8e5d950f0cac18186d42b9ce8c30e5b10a01904808b7ec8be2b36fc2e0

    SHA512

    59707a30f5da89489c3c40cf7d1c445f5b39a2928284880ac90d0a1d3b697e72a47266791205421f0749d2871662ef5c62c0e58485fde4b1fdc383ff6504dffc