Overview

overview

8

Static

static

3

054daf3a5a...ce.exe

windows7-x64

7

054daf3a5a...ce.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-01-2024 22:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    054daf3a5a81b5227b61f840d369c10ddabee38f1061ee04bae3c575dc25ebce.exe

  • Size

    2.3MB

  • MD5

    654bfe1a89c088b7978688eb4f3d1b1c

  • SHA1

    7db12033fb7fa46317a8758b90563af56978791f

  • SHA256

    054daf3a5a81b5227b61f840d369c10ddabee38f1061ee04bae3c575dc25ebce

  • SHA512

    306a424168fffa85133d1d91179238b2efacbfa7cd4530e1bec05cbf6ab75af17adce79122f0b99dc272997ce70d0e357b3aa35e191697ba589dc77410e1a174

  • SSDEEP

    24576:B5gEUwmt0f7HRZ/TJRMx3ZEHnF3hnUTIIgocXKFvLhRIdsgTRiKAf0aIz5H5un8V:3zCKHnFmTgAvLnIBT8K4A5H5u8QeN

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\054daf3a5a81b5227b61f840d369c10ddabee38f1061ee04bae3c575dc25ebce.exe
    "C:\Users\Admin\AppData\Local\Temp\054daf3a5a81b5227b61f840d369c10ddabee38f1061ee04bae3c575dc25ebce.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:5052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    3KB

    MD5

    bda9cd6099f225d17cb10432283de7e1

    SHA1

    e354b3188a1325106326f017ed9a8b7cbc2d2e4e

    SHA256

    8dcd4b21d3a1dd8ee9249ac433afbde419bfce1aa4f8c499d5c6a9d28dc0fd7a

    SHA512

    590d7dce11f33b885ee2e223eaa1254eacad0cc3b3086f3f8576676bf71b6e9b6e19ba4b1c0487e2ce385ee5fdf9f4ccebf9964355571fc7a0daa9a0f628b330

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log
    Filesize

    5KB

    MD5

    1d0695d511f95fb2a4485cafc9937932

    SHA1

    4f39f6fa27c5e6bf259768470438d53b57184104

    SHA256

    07dc40096f482aded5140658605dcb583800e9fafce831dfbbf560a1ef3294c1

    SHA512

    88f9ed2b264ea372f4e1ed3cdc1702bb9cb5825d3478df7b335ae57f545030c8e0548d11f956043a60bf686deff918d911bc64e7f020ef8fede9335ef186324d

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Yandex\ui
    Filesize

    38B

    MD5

    de45ed68deb6e1d68cc335cdf53655d4

    SHA1

    35bd148e5482a262cedb04feda54003b842dd78f

    SHA256

    d6cada5d8bfc91f4a2ad2fc1d0f93ce85a599398fd211a660e89672f9aceb548

    SHA512

    ee79130c6c42aed8728b1e30fda129f5dbe4d877eaa9930ef277cf30e4150138cb1a8cf0575a246950d9b24f697fe89b8ada5c6eed0b3ee93dc03d75332e8eaf

    Download Submit