Analysis

  • max time kernel
    144s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/01/2024, 19:35

General

  • Target

    f74096ebac2275a12ef4776f0655e537f090445b7353f9b7313721501c5b2ba3.exe

  • Size

    5.1MB

  • MD5

    81cda5bde7cda6c84958b799b8d7a95b

  • SHA1

    3a422ff53cc89c3f11d2a8b2c942ef8d8f5b5cf6

  • SHA256

    f74096ebac2275a12ef4776f0655e537f090445b7353f9b7313721501c5b2ba3

  • SHA512

    caa30601fd3ded1efdb1195f344e8b5c068b2f410fa6b82612c005e1f4dc34a9e02f6daf43bdef5f39a8a0abd89859fc58053cba429aa047f2597bff7a61fc00

  • SSDEEP

    98304:8HenYKGxUcl3nT86Ytacv5Se1KdzOJDb4v+u:8Hr/YtacvuwN0v+u

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f74096ebac2275a12ef4776f0655e537f090445b7353f9b7313721501c5b2ba3.exe
    "C:\Users\Admin\AppData\Local\Temp\f74096ebac2275a12ef4776f0655e537f090445b7353f9b7313721501c5b2ba3.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    9b546927ec5e9a9fe0d7e9addad29995

    SHA1

    24b24b6021bd532ccaf38d626b1deac13ed69ed0

    SHA256

    13faa757da2ae1f84a1f5b6f796c1782bca851d3fa661064231f869730bc8203

    SHA512

    6dc1cae95b306408429c304b926c722cd42c7c65d0cb9b060257395cfec419e1f3e87439d34e432f2f9e661147995fcd920cba510ad01fb75240d10fec8e9e33

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    1af28eea37e4fe8697b153f5ba50ecae

    SHA1

    d5c1b6e4a8185a9aa0afee5bd8840c0aed4cf4b8

    SHA256

    26a33cd77440f1de3f095bddee99dba576d63b2467121390f4543dbad9721bc0

    SHA512

    dfc2c0d02fd252bc86b32339a642bdde118bab7dda8a8a52fd67aeffb8843b524b3318f9257bcf8126dadaf1fd26bf0c3c9bce98cfd34cbdb087245e0fcbdc32

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    56f597add370c78ac4925bef52d24dc5

    SHA1

    298f5cb37c257d009b93012b04bf568f8c176b17

    SHA256

    f27d50f4aa5ab2c0a8497d232b3a730b50816755814318918738c6762bc690cc

    SHA512

    bf9e549e7cb94e22b1e3e44e742961321690d0b6996c47d2ce2139c7d2c80416bad5d6b1fe3b14f2b23b895fe520d82f59e484e284f96cc9e3312f89d5a761fd