Analysis

  • max time kernel
    145s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-01-2024 16:48

General

  • Target

    3e16723f4ffebb29b54551678daa719ecf9d683f90b935d0d741606149dd75dc.exe

  • Size

    5.1MB

  • MD5

    5abb01e9eb3dfc01b82e0257f9838304

  • SHA1

    6200de8781751776b5bb93d60b889b71838e2e30

  • SHA256

    3e16723f4ffebb29b54551678daa719ecf9d683f90b935d0d741606149dd75dc

  • SHA512

    9130ad4737f68400c3effaf2ea3bafa1a0a165a25d4bd18b96b65b26cd6eaa4473172e1b8c0cd28a37f88f787dedf0268f2cab0b349ef96fad68238faa3310b4

  • SSDEEP

    98304:8HenYKGxUcl3nT86Ytacv5Se1KdzOJDb4v+u:8Hr/YtacvuwN0v+u

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e16723f4ffebb29b54551678daa719ecf9d683f90b935d0d741606149dd75dc.exe
    "C:\Users\Admin\AppData\Local\Temp\3e16723f4ffebb29b54551678daa719ecf9d683f90b935d0d741606149dd75dc.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    8802bf61b28accb2c18408d39ac73193

    SHA1

    a33fa1c62e6527e73c50984bd4af7d2b99608258

    SHA256

    f583aead0d70e367a3bbdaf01fe98ce15d44b0b0857358ee12159f99ec462122

    SHA512

    e8e5ab0b5f7259b77b2fca305bddd1e3809a57ce4d332d76265225bbf3f9e98cd3f0084c7abab1465a68c6aab7dfe104e5c77dcba4d606a5f3cf21222bab05d4

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    c871066142003b131628113fc1dd8901

    SHA1

    9e8dc33fd452941e4970afc0e5bb153cd59ad2fe

    SHA256

    d8034a25dc99a27ed787bc813ae5d946a2430f5f1bdd9c54aaaabe073a15bd50

    SHA512

    84bc19616419e82ad679631ba38d4e1199b5c2f5a6604bfba32d6c41588e12dd4f36655400de812df499aa71129a798543991430d0d8c11298054f755c2e1007

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    6aeff1dac35aa8fcd11796c73ddbe66b

    SHA1

    962e3356bd3f431146597deabf3042305c2df50a

    SHA256

    3ee116d3dc4be5d1b4c2ae545da3c4e050857f69571d6749821c36da4b1d0ee3

    SHA512

    4363c9fb2a094744a4a4a8c2507168db8527d36a70f261054241048f6b4c137f5353fc37e5849bd60d473f03a69518564499b93a4b5b6f7964af295c246e5fd2