Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/02/2024, 20:32

General

  • Target

    04d8c3e1b8d60081098751dea92a60f32ac83e14f9328c07ff004e6dde05db89.exe

  • Size

    5.1MB

  • MD5

    163cc300c4d76e1db6e7393dca7bdde3

  • SHA1

    1de75bc165ce8eeda3110ed7fb5248aa4a9cc403

  • SHA256

    04d8c3e1b8d60081098751dea92a60f32ac83e14f9328c07ff004e6dde05db89

  • SHA512

    a6d18bfc267d369aa005d06cc2fe4beaf8309eadf3ac67a2b96e7d25b2ce67f3da19ab3306a14d9821e4f927ae742e2951274438e2b01cdaa7e38851bd026ecc

  • SSDEEP

    98304:8HenYKGxUcl3nT86Ytacv5Se1KdzOJDb4v+u:8Hr/YtacvuwN0v+u

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\04d8c3e1b8d60081098751dea92a60f32ac83e14f9328c07ff004e6dde05db89.exe
    "C:\Users\Admin\AppData\Local\Temp\04d8c3e1b8d60081098751dea92a60f32ac83e14f9328c07ff004e6dde05db89.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2244

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          4KB

          MD5

          0b98dce168b759c1061b7808d3efd1ad

          SHA1

          697732c7a50738d16348e8b14250a118d5c003c1

          SHA256

          6962b13e42d7bf429537cc1786c4789266ccde6138e0e882b6d9ec8d652e1776

          SHA512

          4ac647bed352654cf5f50d575dafd9494a9c61713816f6e899fb418c8c14425d1d2a3742e1ddaecc52318583830be82107f05031b9cf591e4bf69f0726a6ae72

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          b890ed3225fcd7c979fff4b9aa63d7db

          SHA1

          c6591ada6e558a5d598d8a2c8844c2c150774446

          SHA256

          af7cdc3b1daac617a2921c65ea5191a76b66830174a50b60c94faaaedc556861

          SHA512

          3489c7443e2aa84d35d978f1abb99bf6c43074fd535b6dd80b01fe28ee31a89ad4a1b32f135d99c88149b4b17c33194d15a73da0bc8c15b41cece3201a257e89