Analysis

  • max time kernel
    207s
  • max time network
    235s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/01/2024, 09:50

General

  • Target

    412bb5b571b20c1ba10dfec1ed92c84e2793ee19520cdaff48f02100b93999c5.exe

  • Size

    5.1MB

  • MD5

    3e041ef23a05456e67b03ba4b3ac16cb

  • SHA1

    da15f0d4088acf53c040c6e30cd070a33a860b3b

  • SHA256

    412bb5b571b20c1ba10dfec1ed92c84e2793ee19520cdaff48f02100b93999c5

  • SHA512

    4d9395573344adb928f0c5b70bf076004ed9061a0d7f2225b6c82a9d3240d27b744b502f0afb533639cadaf80e887d296dd6c28edaeb4074ed273cb9327fed00

  • SSDEEP

    98304:8HenYKGxUcl3nT86Ytacv5Se1KdzOJDb4v+u:8Hr/YtacvuwN0v+u

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\412bb5b571b20c1ba10dfec1ed92c84e2793ee19520cdaff48f02100b93999c5.exe
    "C:\Users\Admin\AppData\Local\Temp\412bb5b571b20c1ba10dfec1ed92c84e2793ee19520cdaff48f02100b93999c5.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:548

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          7KB

          MD5

          e5e2f65e4e7978c39784fe570dfdbda5

          SHA1

          3f63824e98ab522a7309d7e76cc394625f8d92b3

          SHA256

          da3b1dd07fcb5ed2dbe3db8d3291bd10575c3c1ea3c3eb96a8eb52fc7b38b976

          SHA512

          86e29384dfac325558f791c61c85262cc9ee0ec119e6c2ab02e3d6cf2e818efbfe0db4be655e9b8a2f77eafb4cb04e8189e41e866ab72996345826b1e7fee9dc

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          92eaa7e3a6cc6aa56f613ab11ee43989

          SHA1

          a3a8241e6e394b4b25cc91030e83ec6d8d4d6e65

          SHA256

          5de44b31df6b52c09e664ad298751f41d4ce02807ac274f1682dff4408cfb02d

          SHA512

          29e0947dba262fae74ae8dee540bdb1478803ee1e400d176bc863fa4a851a92456ff2c9ed16fd52479985c507f6d143842ab85157b0d2b71ecf62cdd5273d9ac