Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-01-2024 21:31

General

  • Target

    94bd341ec760936116ace420fb31661039deea9dc26cc1ae79ca8cbb2a3d9227.exe

  • Size

    3.4MB

  • MD5

    bc68c57173a97f0e8048daa14de6741e

  • SHA1

    873887179f880596bd22cbde00924f35a46a1e62

  • SHA256

    94bd341ec760936116ace420fb31661039deea9dc26cc1ae79ca8cbb2a3d9227

  • SHA512

    6bbfc686a3312d20fe672db0d7a07c016f74ca570d1053f091a6168baf61df927065d42ed1fa9ae279ab431217432069bb95be984ef84d000d446b28da0c2b9e

  • SSDEEP

    49152:GeDBcrFsiR1ZwV38W6CbAJC58ndbnwJIZ+r5u8QeLxdjZKVqkv:GCGrGiR1ZSsW6qPkbnwJ3KoDj+F

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\94bd341ec760936116ace420fb31661039deea9dc26cc1ae79ca8cbb2a3d9227.exe
    "C:\Users\Admin\AppData\Local\Temp\94bd341ec760936116ace420fb31661039deea9dc26cc1ae79ca8cbb2a3d9227.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    5306124f2ad94cd4779378ef3f7fb289

    SHA1

    fe75b20ddb49f502876756ed6f7e3e2a29f7a454

    SHA256

    5f3621a9e297dd60ab3efff52f1187fddf9779e91d33e6b399a0d600188f6c15

    SHA512

    bbaa61e367198d9723d07ef3aaa31845c4723dd23a14268164ab3081f65a4dbf31647b35b1ea5fb65f61c08dc8ee989ce7dad8c26e480089f2d7d835f9a898d4

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    1b60a1b0919745a5ae4359a04cf2eda1

    SHA1

    98bf56920b930f0fededffeea2801e5a41c7c1fe

    SHA256

    085833c174b9696077203bb846e0a99ee9c0177d8545f9901d495d15af7d3d24

    SHA512

    cd5c2e6377d3b327ca9f61a24622bbabcf1369030335201027cae9d34648d9c56c4516682b4f5975f5ee111d8192fc0bf19e4071aad2ece8c0a91b26b6acfb15

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    f6d44ebe94175c8a454425963b723616

    SHA1

    824c192a1c151a61c871083c44705224d7b145d2

    SHA256

    240bcde67e2f8a5730e716e916b0953cf73866656c5833339d34d8a7aaf16186

    SHA512

    1f1a50bf35531dbb970d1f5aee582b754bec8c8e235daf80d0ed1acabdb8a05d3ced1cf54b32f2fb698a384b31031c7ad2d3eaf405931764130fba7ee3afce5f