Analysis

  • max time kernel
    144s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-01-2024 12:48

General

  • Target

    3fbdbd39d47841a63a85f8432c94a63b978a0a9e34107fee36e5502e1a167cc3.exe

  • Size

    4.9MB

  • MD5

    db30015c9c8ed1006fbde0414cb74d4d

  • SHA1

    5679739bc3dbe99a736df95a3cbf60389d7dc44d

  • SHA256

    3fbdbd39d47841a63a85f8432c94a63b978a0a9e34107fee36e5502e1a167cc3

  • SHA512

    40cc472327e577593cc9289f1372fce21c403cae4e5bc7a180899575fe563ba121d446daef58c5962e162d54f09694b814b754a1e45b27a77bff55eef557ea8b

  • SSDEEP

    98304:u6QfxPOKfJIO1bbjCfJZ3ciKdzOJDb4v+SA:MOKfJASwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3fbdbd39d47841a63a85f8432c94a63b978a0a9e34107fee36e5502e1a167cc3.exe
    "C:\Users\Admin\AppData\Local\Temp\3fbdbd39d47841a63a85f8432c94a63b978a0a9e34107fee36e5502e1a167cc3.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    0c2f38a112d5187b46bf439bcfd77973

    SHA1

    5463177c6925469dd1648d284dc36cbd5e0dd25f

    SHA256

    f4219cfa2b7c8da29223abc6b5461eb97b1766034aeea00fce9993c2157d7220

    SHA512

    5cddf60a3a0d62a8ef4b0c923a08544f881a65c12dcdd52deb3622b443d74c1b84f7077b86db36059765c9da1edc8ba61087b1ce8ec7085a2619adaa19bd8167

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    c0bd647b999d5556ddad9a10778acbe5

    SHA1

    0dc28757c580ef2864f10db002449efbe410ca2c

    SHA256

    f095e86416953f8521f5b84e3cb6881d79814beed998325b2d3e16ee2f98e290

    SHA512

    95a20d37b118380f17b0aa31c23a4e6313fb373a83dd377d93251493963b3fe630257116aba0007d9689c238460c56d28964e5fbeaa2b72f6946e33d6b651bc6

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    e87897bab3437d3c4c29a15277059961

    SHA1

    3394028754721bbecf4e8b60048a4dc15c92ce08

    SHA256

    622acc181c4bf6bba25542b2f0950a2baffc9935cc236e5631c54b766c6bdcee

    SHA512

    13fce121783981c2f7dd43e5b67170f3879a6a9de9ca15aa50a8153fa86b878d36454b401053bacd9bdeda81b51a2da9cf02e3b859e72fc04ddd4328395b8e20