Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 16:47

General

  • Target

    d2cc4db23b1636301d04a4eb943f8e52654c5e9b65cd79aa8bea39a1ff63017d.exe

  • Size

    4.3MB

  • MD5

    7cef4c1060264a69e4a1aaa2afe2895a

  • SHA1

    861b0788c932cac1e970f0714ea89e18c07a70bf

  • SHA256

    d2cc4db23b1636301d04a4eb943f8e52654c5e9b65cd79aa8bea39a1ff63017d

  • SHA512

    0fb23604719ab7c0b533a0de77a1f750a2b0e0ed17cfd963260c69d2ba10c0e4626a367d5b2d7effcdef233c3c95b10aa5bfecd2bb59144447378f0e398d90c9

  • SSDEEP

    49152:EHUgInYbNo0L8GxUc7R3n+u8295+r5u8QeKxFOJxdb4vZKVB0:EHenYKGxUcl3nT8HKdzOJDb4v+B

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d2cc4db23b1636301d04a4eb943f8e52654c5e9b65cd79aa8bea39a1ff63017d.exe
    "C:\Users\Admin\AppData\Local\Temp\d2cc4db23b1636301d04a4eb943f8e52654c5e9b65cd79aa8bea39a1ff63017d.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    9bf5e969f8b087cdc32e616b66ca6dca

    SHA1

    72aa41fd3f761aacc56decb9a4f0a0c7a704ed19

    SHA256

    cb340767a2a1206e80bb829a6df4fa0d870cac59df70fd13c2230b8bdfebd200

    SHA512

    6470a6494b45aff12cece0f89ab4e44fd1ff0aa3449d0cf2b6303e022f8ee92dfd150d7bc86b8a24b52ab89bb4a6bc16270674ed3e7fa2d0073a678229e3d641

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    990ce9be75e0ac4eae6e191551df44c7

    SHA1

    c4ad4271a293d1b3d0c93b9445b44af1e6623850

    SHA256

    51cb6719cd9edcb1317f9208c6c60185531e0e93532fe8cb1950c6ccaf407a61

    SHA512

    52c1d62ac9c801d48cda46f7fd018f02fd2dbfa8dde6fc164a3bd3035ab0812d362b8ec066fd7536fea7b2c217cf3857afe14cd623ae767453848f85fcb072f0