Analysis

  • max time kernel
    147s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/04/2024, 10:01

General

  • Target

    bfc9085287eb4bf05bb8707e81e4a7005dff61afdf6b13fff3dbb466d2dfa2a6.exe

  • Size

    4.6MB

  • MD5

    774346babddd2ea3ce4364dd415ae1cd

  • SHA1

    4f49f036434fc1ea15f97ab3d07d8d482b6c1a4a

  • SHA256

    bfc9085287eb4bf05bb8707e81e4a7005dff61afdf6b13fff3dbb466d2dfa2a6

  • SHA512

    1f4963841af59648b088d297e809f96331598c260f776bca5a3d5ab0f4ab4b0179db20aa78b6e6a14383ec0cb26d870ef5ff08655c1d7141eeb97c4fa57f5e4f

  • SSDEEP

    98304:p4TjVBOWLl3ncPQEF4vClRJKdzOJDb4v+:cBOwEF4vBwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bfc9085287eb4bf05bb8707e81e4a7005dff61afdf6b13fff3dbb466d2dfa2a6.exe
    "C:\Users\Admin\AppData\Local\Temp\bfc9085287eb4bf05bb8707e81e4a7005dff61afdf6b13fff3dbb466d2dfa2a6.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2016

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          1KB

          MD5

          cb22816fac55b1a014a3f99f7f325811

          SHA1

          6ac5366a9b8744056a0a041b6dad6cb4d2b1fd97

          SHA256

          9c2b8bd29785abf73cc119df5c072561287421f137956a29bc8652d98c9157bb

          SHA512

          1adc8d40548ee0a8d441f4e92d0dcd86d633f64f9c25f5c4696787f81ca8ffdddd0fefdb79dc17f380c679dd53bbf0d30645f12c811dcdce74703d7d6a47c9b0

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          2KB

          MD5

          08c5438733c258b666c1806bbb045217

          SHA1

          db1e9b678f54d51130f6bc671e422492fac555ae

          SHA256

          2977a55f7ae84a260d1ca7b57aae3914b7566f57a39c5fa06b73e8ce2543daac

          SHA512

          281719df87432d604c1768ba321aabf2f965b6506f936fd33904955a5caeaa3d7ed05c116aa75ed32de52318c26628b521425751b79ee9e7ab8bcd8a2fd531cd

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          3KB

          MD5

          034eb64741bca5f2980e90490bec5fa9

          SHA1

          d33b2550fd92dedc967128d297a1e41bc794cfda

          SHA256

          ab4d604a1ced494b6f31332eb75703261e6d04199fa239b2d644a116e8253583

          SHA512

          b7836e5f42fd67a6a310cfb9dbd102df9156fb154df04346bd880311ab74fd36fc8082277db6bfa80bf3813c3286a4e1df5b9120839f1fff60688fc1411fd232

        • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

          Filesize

          6KB

          MD5

          59cd4b0d2ac88ac98ae38e2ece834f84

          SHA1

          755d3bca9b4fb7cbf1ddcee3a6bb334198daa9d4

          SHA256

          693efa4aaf6b35f65a8d29c99423b21e2f7c362e319da233093b7c070133919d

          SHA512

          605e8a88d40cf7d7822fb436c155d6d6cdaa63c637186182c4d41ad2a7b732a0a600f7e46a3e14696097b60e65df74e916ef16abdcc8bf6651e25c8571566a30

        • C:\Users\Admin\AppData\Roaming\Yandex\ui

          Filesize

          38B

          MD5

          3f6ee0062f5182bead9d7779d6559a11

          SHA1

          0bf90c795653eb5602c4cc7f8f6243d2b181d46a

          SHA256

          1dfe9bb8e622d96dc21de71abdbee7f4f9ff4cb720bc548ab9451c9ec1bf7ae8

          SHA512

          d93f3be6a88911e06b1689bc1cf4fd66e900a04f1dfcfe45654655d99bd253a12380b8bd65054f594020cf6b26bbc215d4f21224d9f46021e324388b44f0c74f