Analysis

  • max time kernel
    9s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/01/2024, 08:49

General

  • Target

    a8ad9414cf0ca667bc645ff2664919c9c533281fb3accc7c95622f183f07ce06.exe

  • Size

    4.3MB

  • MD5

    471e71b914c1098c340bdaa745a54ba9

  • SHA1

    f0dcb7e0c94408848a6489ca7a8e09cd906a247e

  • SHA256

    a8ad9414cf0ca667bc645ff2664919c9c533281fb3accc7c95622f183f07ce06

  • SHA512

    86d40e7da11ae93bf9408b32f513ec60679fa931851fe1997688fbf699db50203d1b86e4bc3e1920b32a4cb91e66350e393c357ef0e836bf4902d4df2c248d34

  • SSDEEP

    49152:qMLPIdiWU/o5LcUekfbj+whw5+r5u8QeKxFOJxdb4vZKVB:bLPIAN/nUeKbj+UFKdzOJDb4v+B

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a8ad9414cf0ca667bc645ff2664919c9c533281fb3accc7c95622f183f07ce06.exe
    "C:\Users\Admin\AppData\Local\Temp\a8ad9414cf0ca667bc645ff2664919c9c533281fb3accc7c95622f183f07ce06.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    5KB

    MD5

    b1ab54c8ffd179306ef1a1f0d421b847

    SHA1

    d90f6a46ca50144b4e05e67015226b71bd5d507c

    SHA256

    ef139d6ca8f38ac717e296223512c0e6b1d689df37855089fc4e5e2b11e7de26

    SHA512

    e2bdf2b2b0917a0f4bcb9e38361b6bdfafec9133cb0a5016006e3788df388580994218d4e5d5da7688690e3ea0acac1ac7b7530be56c9eac6edc3d736e5a52e9

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    039a49b177461eb27f9f9eb880d8a97b

    SHA1

    f251e499993475ca97eeb850ee93eec5ba3d0159

    SHA256

    c17ef68bced1f8a4a14cd756a2abf5eca6b6bc0fea00bf714aba8005dd5ad9a1

    SHA512

    bce8a262e421766c4e9e1221b67948375f8e2a92dd1fe5bd937b4b249b587c92b7d4b19456493a59d73e44678b61ee0adaf94fc1d275ef195bb124263f55f8b4