Analysis

  • max time kernel
    157s
  • max time network
    173s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-01-2024 10:49

General

  • Target

    bdd8d951ecbf97ffd78149446853ca8df101342c09d7932344aee02f2c551beb.exe

  • Size

    4.0MB

  • MD5

    918b8750920641777909ca6d4d32757f

  • SHA1

    41a3276ef2579e430e3667d57eb9c8f797146e03

  • SHA256

    bdd8d951ecbf97ffd78149446853ca8df101342c09d7932344aee02f2c551beb

  • SHA512

    e60a762d1c86fa9790f9d14925617a1058dd7865a85d8d3f72ca47f69d9cedcc9041a323df2d71b8eff84ba98bd352edeed76d311c2469252959619602d27735

  • SSDEEP

    49152:Q0N3IpkodZfdlTXKnB3nZduwP4oY+r5u8QeKxFOJxdb4vZKV:B3IfZfdJXKB3nZdhKdzOJDb4v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bdd8d951ecbf97ffd78149446853ca8df101342c09d7932344aee02f2c551beb.exe
    "C:\Users\Admin\AppData\Local\Temp\bdd8d951ecbf97ffd78149446853ca8df101342c09d7932344aee02f2c551beb.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    02981f60aa7d1abc3f806ddadc918444

    SHA1

    7ad7cc989eb946bd48f1bb7f94a5e01903c8f161

    SHA256

    6d52e6373d10760cd4dc2a3008b949920fa395a830201432eabe27649228d976

    SHA512

    0e20d750eefe7ce75f43551f03076840d0cb67b66429bff94ca0f484565dd94d0bc85feb81640362afee61830c57916c8bdbc30a2d7401a2fec17dd07dc00b6d

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    d80fdfbb16117af61aeec15b71b6ed66

    SHA1

    f77a7ec58c8a081292a6ab6dd292ce43df86189d

    SHA256

    0a499b5a5fa112e44192d02c56d2886731b9e8f29e1f2511c25a85a649ee7d27

    SHA512

    909cec5821b774bc210c203795468e014b89bb1235ef9bc13c2ca73f845e8a3568cdd3697e7f0a58a673407db3239a6ff9d870b6286d8eb4482f90446e1a1ac9

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    7d5b16654caf47e38b4b65c1cbbf91f6

    SHA1

    86bc052512af1780b4dbb617b2fd4c293c098782

    SHA256

    d6948a70a3f991f56cf2fe15676da2cfecbb3040772e99f76914a71620c26b75

    SHA512

    00e93d48d8b87700599b2741408d2a5d41838ebb7bda0b690364ccf1be85121545bf14b824ce0164f22a2318395979a2a5189a5a87c1ec01da9488ccff1c7466