Analysis

  • max time kernel
    91s
  • max time network
    132s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/03/2024, 14:58

General

  • Target

    34707dc2688f6ee88fdedeee683c94ff2cb9cd4040e58e4649c2988eba5fb074.exe

  • Size

    4.7MB

  • MD5

    ce96ed5927f6c4fca75041b1a62e3534

  • SHA1

    f3c5d06d4bd25cf7ca9222d61cc00cb107dd3ad9

  • SHA256

    34707dc2688f6ee88fdedeee683c94ff2cb9cd4040e58e4649c2988eba5fb074

  • SHA512

    4569475d54a6cd6f29335c0514a6ef8f4d0745f18408322ddd77a6cedefe7e07c57674058b71f8fb62b8e4a16e024daa8a8b4919925715d18712098c51999ecf

  • SSDEEP

    98304:shIHjWibmorLobjYXzZpvF1Ff7PKdzOJDb4v+8lz:vWibmoFzZpF7SwN0v++

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\34707dc2688f6ee88fdedeee683c94ff2cb9cd4040e58e4649c2988eba5fb074.exe
    "C:\Users\Admin\AppData\Local\Temp\34707dc2688f6ee88fdedeee683c94ff2cb9cd4040e58e4649c2988eba5fb074.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    bf3671b2cdc71f12c627d2d5f7cff452

    SHA1

    3426e4466b519db5fe820753327ba81a590bdc47

    SHA256

    abbdfd8dad5cb1654021589be8a99238bfc63ffdde670a9a709e63e32f9a740a

    SHA512

    92de6f2084d9533c9482793bf129051d672fcc448737e2b49320b90a6f4df2e09488b9eecffd2b1a82b30f56b772350633689f794403afbf331a6741edd98700

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    6KB

    MD5

    6d00192c1afb91e67cfca069b66f8bc8

    SHA1

    2cd80f3a97e822f8f4a5e5f2a34d97d4b265f880

    SHA256

    d5f38bcfefd5dac057dba4cad8064eb2f512752d66b1f727cac007d4c8afa23e

    SHA512

    a49c3370d4387ea8e4b02d8c3bb1964b11e3404e10a9f448bc697bdc0ac6d9b51944b35592998712348ec8bec5ff9bca15b4d3938931b8221a6ee07e9ab72fed

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    9926c999503e5630a53684c562bce7a3

    SHA1

    025094201359c70a1c707d24d923f18546422790

    SHA256

    d4a9fd48ddf265c15aaccd8f085c09e395b5716f8872c0b1226ddb407efa8f75

    SHA512

    2e092aca52ed56d8cc6f0b9726b2e3543418796aedfca657a01c8e030b734dd0109d9a773664e7eb4b36aa4e6378779082d5fb5342b58571533ea07252dadcdd

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    1009fa0541d932f99ca07451353bc926

    SHA1

    f9d8e40d9b5700dd308e4443aaa6161fe74acdb1

    SHA256

    a5ffdfee55e33b4b762b32535f5e7cfc8b5b038147d38cc84c7113a10133eb32

    SHA512

    20a690d252eea6f5c6f6666c0df442620bc8394b9e2aedd69cdc565da8a22fa5ce309772deedaab75687a5e7707c739724744be50af4b1240c6e3004d8bf4ae5