Analysis

  • max time kernel
    4s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11-01-2024 00:32

General

  • Target

    323e1601f8c0b24918bc3b459a0b44bd24a2ab0a7e9feb5444eab76d96ef5be2.exe

  • Size

    5.1MB

  • MD5

    1399740e5baf57761046d27eaaa1c6a7

  • SHA1

    5536ac2a0daa8265ba6fa1e0c7cb5479d7d76875

  • SHA256

    323e1601f8c0b24918bc3b459a0b44bd24a2ab0a7e9feb5444eab76d96ef5be2

  • SHA512

    b3805a14f658589ec38fb4f21ce6e5291fd961df96315c118854b66befbc38cfbec748a59b32218fee96681ddd45d5052bb81096880bca148d101d3f36969fb0

  • SSDEEP

    98304:8HenYKGxUcl3nT86Ytacv5Se1KdzOJDb4v+u:8Hr/YtacvuwN0v+u

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\323e1601f8c0b24918bc3b459a0b44bd24a2ab0a7e9feb5444eab76d96ef5be2.exe
    "C:\Users\Admin\AppData\Local\Temp\323e1601f8c0b24918bc3b459a0b44bd24a2ab0a7e9feb5444eab76d96ef5be2.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    967abb8c8723c3ea62f8e3c32864ce2d

    SHA1

    5572808b10923f63055c41d2ffd03ee27287b880

    SHA256

    5ce99204605bdfd3280a6e2c2de638cc7eb968969fcc73f2baf4489bccdbf76f

    SHA512

    03b2b543d82d8c45b72b955f4f2c4ce06356d9db9efc6105b08aa1acae6fb396bf89a0fb69a038a335eff9327ed3856a90f5ad5f7adf73036d2f82e8bbc56e7a

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    c36f66e6be8156c4f857fb1362491e20

    SHA1

    5c7c540fc14f4dec589cc91895eb9e0f0d3a4489

    SHA256

    b354b66ddbdf6067bd6647ea67fb2031db6e392234add2074c03ba23166e6ca2

    SHA512

    b077523b880a7b33d57a6adfd1a7841cea29b4da8e0968e1cdd78b85e78dd5819b6ea4dc8056976b8e4b8b1a25a2fbedc996460d7b69c77a418e40869eb979c4

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    c1b1cdd494d6bf930bafcb8c63beb2c3

    SHA1

    70da9b4aa545bcec185aa264cb6dd2fdaedd3b45

    SHA256

    33cbc840031dfb344e280058d14e146cb8aae3a106d109fb4d297b5e993897aa

    SHA512

    297365600b169d5b41fb0068878c1853e28841ec33c9e2d508366cb75fea198b3f0e36905017c974b3420a7a766d1c60d8e0835d3a6cd54d5d050cc8d78f2d1a