Analysis

  • max time kernel
    149s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-01-2024 13:49

General

  • Target

    3c49ffb9a007d77bddc562528fe7ff75813e501345c608e553b6f0f4eeba97a0.exe

  • Size

    5.0MB

  • MD5

    55b4580409568a7f4da0af2bbcd4e24f

  • SHA1

    f3d24b71532bffad92449a00cd8c71c16e3f6114

  • SHA256

    3c49ffb9a007d77bddc562528fe7ff75813e501345c608e553b6f0f4eeba97a0

  • SHA512

    8ae468a47b5cbb9b72395657d28efb926fc357a31455bd953fcd3e4375cb07208399766ff7ccf8ce60ecd764f8726e40ab697621a7f7fd7036fbe4ced1a7c5af

  • SSDEEP

    98304:zgu9llk/yHwNf3n48LYtQMKFfikjKdzOJDb4v+6Y:rllz0Yt506LwN0v+6Y

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3c49ffb9a007d77bddc562528fe7ff75813e501345c608e553b6f0f4eeba97a0.exe
    "C:\Users\Admin\AppData\Local\Temp\3c49ffb9a007d77bddc562528fe7ff75813e501345c608e553b6f0f4eeba97a0.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    3349368e66ba10d4732d93f10fe83561

    SHA1

    15e141ec528db27225c4d929d6ac5a87d47ea6c4

    SHA256

    3a14ea8ed388e99626849c094dcc45c82e87aebe07406482e94d003b84cfd2bc

    SHA512

    25c79e3f91752ce2c0970195ef9e11a1dcc3d9abbd65818d9e45316ba2ac8b18f1305a5dd16c2882178b6063a91f03863e1e8acebb55b3dfbddefd8e37986612

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    a42cc7d5824fbd428cebd4c5becd2cd9

    SHA1

    c5c25d10a6a34b33c982a21aeb30291b5c0abe70

    SHA256

    e97ff76ee096d7363e03af57b95137f6a34b9a7168ec8ea5d59fb8f647068b23

    SHA512

    1447e4463d619b1ff69e349ab1af150d850486ccfc43ad4c78360de1242a705f63f5b4f545b3bcd2c560a5928ce1bc8c32b7d177af0645c481b025bb6fd038d3

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    a43ac94bd7a4f238032104a17dad3ae6

    SHA1

    44b59e4a96973fed47a4da3d6f0f296221a04495

    SHA256

    cc6276af706df1eae40354416dd598064f18eb236092e0b53d91a6a9cdca86d5

    SHA512

    64e0c081bd602c89555b94bd8d1fff13b0294d49165cc89c68cc6b5bba28e9851bbaefc2218f68ea7b157aca3b2cac57846e3e60b07dc0ef7988937598b1deef