Analysis

  • max time kernel
    4s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-12-2023 15:05

General

  • Target

    0b47fabc5ca6a1ee7e736bf54d61499889a64f485a22b8ca02be3f0f60a87c9f.exe

  • Size

    4.3MB

  • MD5

    384f552d62fcfd7bdf21370bdddc7b4b

  • SHA1

    d304d1c89430855153c8e2e10a654cfaed26d3d0

  • SHA256

    0b47fabc5ca6a1ee7e736bf54d61499889a64f485a22b8ca02be3f0f60a87c9f

  • SHA512

    1edfae1e12c64aa8d945dbaec1d53133caec22f55106aa5b8a78baf9f60e9a3c32284dfcf8b5f725b0a7fe112e02390c563fb65f3c747dcb4bb7d1ff3fc45a6c

  • SSDEEP

    49152:qMLPIdiWU/o5LcUekfbj+whw5+r5u8QeKxFOJxdb4vZKVB:bLPIAN/nUeKbj+UFKdzOJDb4v+B

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0b47fabc5ca6a1ee7e736bf54d61499889a64f485a22b8ca02be3f0f60a87c9f.exe
    "C:\Users\Admin\AppData\Local\Temp\0b47fabc5ca6a1ee7e736bf54d61499889a64f485a22b8ca02be3f0f60a87c9f.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    ca92d39800c9a848db55b0b02ed7ac6a

    SHA1

    bf62f557f59d0780c2a89b5aa4bf820eba3537ef

    SHA256

    6b2a0e53cf27e726b5a1a06fc71f4ff8ffcfe49301b01b771e696d2b207e5acf

    SHA512

    7fd8612ac920648b339c64e310d5fb091795bb786c2392046dabe24f13be892a330483c742b3784475e86f147e29712191d23ba264fb4e7c1d9635c363fc125b

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    680a8c0fa8f0347a2183d33242e281d7

    SHA1

    06ffec5d3c2a9e848998214e8a394d3fd7e63c6c

    SHA256

    75d0abf29c3520a36a51525a51a6ed35d196041d9fd933f5609b472893144e15

    SHA512

    d918d5c5edfaf0fd4408db403f33df80dc41d9612efda539a8771c09644b8b5f3b967c3127001a687b54c83ffba5b87128e05d25c1952165f4741b9f71ae4fcd

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    7029a1bfcd5585c43789fb278f996b37

    SHA1

    a543e23029cd9c2cbdad155279505dfbcea623fc

    SHA256

    f2b9c896dc0c3a3cb5c5d9597ba187b13650cd0b4b84a77e99a00c7da2396f90

    SHA512

    8431e8783c2f463d80b1a625fd6aea455af76033e5dbdc20d920bb09b617c42da14b54c3a95093b1517138daec7b50d981032e1cd385d703281bb1e7f8aa322d