Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/01/2024, 20:23

General

  • Target

    2dd816133c4b45c4d7f90191683692b20b0a5d18dc81105e8eb346d44af91ceb.exe

  • Size

    5.1MB

  • MD5

    dd1e73723983973bfa0f00bbf2c53145

  • SHA1

    8cc237ea901d1f482ca5e0484e83d0a589072cf8

  • SHA256

    2dd816133c4b45c4d7f90191683692b20b0a5d18dc81105e8eb346d44af91ceb

  • SHA512

    67a99cd6673d2b240fdd8d3df77cabf864bc92d18e6270a2119dae9541886b4cda90a3a6ea7260c4b82343759bd72b843bb5fe7523274f035e264777a4f2c4f4

  • SSDEEP

    98304:8HenYKGxUcl3nT86Ytacv5Se1KdzOJDb4v+u:8Hr/YtacvuwN0v+u

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2dd816133c4b45c4d7f90191683692b20b0a5d18dc81105e8eb346d44af91ceb.exe
    "C:\Users\Admin\AppData\Local\Temp\2dd816133c4b45c4d7f90191683692b20b0a5d18dc81105e8eb346d44af91ceb.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4260

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          1KB

          MD5

          41bd1ad0d758a7a51f567b8b75934e88

          SHA1

          02896e01a253dc8d854aaae1cb75f4c9c5b3ed5b

          SHA256

          6d897e55e0eaa8814290912819822a8a34bb962c66dd1aaeaf4865976a965c76

          SHA512

          cb8998c0a884af914a46eae5cb6daad7d7d7326a304dc78ea429dded9b16cdc8541208de262dc8e6dac578bda1d4337410ac28ac2885e5e219a092853e82f672

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          5KB

          MD5

          7bbd132a08e5921f36c011826c3277bc

          SHA1

          48623c119404e85530b89a4605ac794d4f1d9e7c

          SHA256

          fa76ee8ea15c09e55de5ae35d79f4e6530f80b956fdef699a2094772bdd78bd5

          SHA512

          e9e86f4a70bb8c7ae35e5ae86eed7a99ea85b66ac618a843cc3f6e002a789279a0c2a58cee31a9daa7dfe5f0b450184106a6e7004824d535a9b48347cb2770b3

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          93c43fd33b98b8eafd93bc8368d9c82e

          SHA1

          7fb3ac81e5f3fb6581053eeebe9384735937be41

          SHA256

          87d8365e82b6737705781c00511150efa95a57dc722a5a6e6ac957c022b1e6cf

          SHA512

          2b5945850d17dded76b7e94bb9158823f40bd39c4d6404db08a8ab5a026ed7f7bdfe7d9e0a80231de00f0c397dbe84a277c870257045a170b67b0f9070357d29