Analysis

  • max time kernel
    126s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 17:42

General

  • Target

    fc3de46c2f03f76b75fcba86ac8b9b3569dad946349877630e695d38fbc1e9f5.exe

  • Size

    4.3MB

  • MD5

    98c361e407818066e2bacb8f643d2346

  • SHA1

    ffdeb6ba6507cf581766412bc8c2424be2949cb1

  • SHA256

    fc3de46c2f03f76b75fcba86ac8b9b3569dad946349877630e695d38fbc1e9f5

  • SHA512

    e821e1e09348b67c285d0f484e70919bc0ef01793fc3ad1b86b84c7775368dbfdd47855fe3dc9452e6aac52875dbac40a7fd681d84a01aca2f1e6bfd764226b1

  • SSDEEP

    49152:qMLPIdiWU/o5LcUekfbj+whw5+r5u8QeKxFOJxdb4vZKVB:bLPIAN/nUeKbj+UFKdzOJDb4v+B

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Loads dropped DLL 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fc3de46c2f03f76b75fcba86ac8b9b3569dad946349877630e695d38fbc1e9f5.exe
    "C:\Users\Admin\AppData\Local\Temp\fc3de46c2f03f76b75fcba86ac8b9b3569dad946349877630e695d38fbc1e9f5.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:2180

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          1KB

          MD5

          3278eee05213c619ff6d02e4f2367db1

          SHA1

          6c6946bce98838250b9d203238529e552004221a

          SHA256

          5797a043b4a5787cbceadee8d1022ea7ea8f09da5717bca9e779176cb1063c58

          SHA512

          f4d43a76cd306bd5ee3500b846667af09c9737723b34751c77044c7f78c7e0b56737702c7d83a1b53d878477354bab54a144a31c59259bf64da660ce407a60c0

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          2KB

          MD5

          db101107dcf6856a4e66bc0f6c14b728

          SHA1

          64d7bd15940aebd1bea6bd6a6cc394ed4eff4af8

          SHA256

          6004f462adfe09c621459327159f486a0b47a57b54025915cfb00d4cdaca191b

          SHA512

          686f422a7a9364a093124a32c11028049c28bb54587711e48759effe14e5891ee9f1d121e9a8d20fbd6356b63de98e3750417a3852808547a42ac71373ee030d

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          5KB

          MD5

          f41fd1f0c300dc1b4309444e65da672b

          SHA1

          b530c1a6cd6ce49bc955a2fc705e6ad9079623d9

          SHA256

          74e949aa36dcb31b5d667323533917c1947e8107c460656d443d96ca496b22e2

          SHA512

          a7b39081fb0d20b9c4361dead3021cc4edd91e76e2348a5f2e00313bc109549fc2a2cdcdfb4be9e7ad8c36857ccfad70a1c6fb49bb8c3c961bebee41cd8fa5cf

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          f5939187f08f41a4b22343e07f1d7991

          SHA1

          66e70e2951e658c69da7dfabae511f306c76aad5

          SHA256

          2038c3ab2a0f5e0a3e0409d056c7dbef514c31cf600ad4d7c60b2c2b30f2dd04

          SHA512

          62301fcc6da13aaddde99ca690f25e27a7525356b0fb9bc566879a3988e4c84dce39928eb50febf20a1367b22d159479b789d574cbff51e9beafb547582e4992

        • \Users\Admin\AppData\Local\Temp\yb9FD8.tmp

          Filesize

          11.0MB

          MD5

          7fe0c75b7dba13220b1b1ee39cb42733

          SHA1

          01bc056382377ac7d2261372a9f4668834fe1ce6

          SHA256

          0dde20d4241c1ae8f0ec2ec38a782ab93801d15f099715f59041c9cbbbde64ef

          SHA512

          35cee9630dc88079ea38605400c57220fd009368a09cd9b47e3f647b7a2a4962986bc0d7a99b27ca9184ece4f6b07298ef185c3a84d8f5647e22dfc40e8b2d03

        • \Users\Admin\AppData\Local\Temp\yb9FD8.tmp

          Filesize

          18.3MB

          MD5

          58c702aaa11b1086351abb33cf6466a9

          SHA1

          404ee051ad953c19f5759f224a721dc294aff22e

          SHA256

          ab2c00c481711f484fa19c8cb8b51baa298272ddd8e91515b0bcd4ad043d3e24

          SHA512

          0f4cb2424d5712bb033a560dbdc1aa6960106437f948d2f7c0bcdf1f7578885877fc0dc012b1aca491940e47f17c89a027830fad1278ecd2f03696005ca37c6d