Analysis

  • max time kernel
    101s
  • max time network
    111s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/05/2024, 15:19

General

  • Target

    3f7d924b55c561fe2d41be336695a45f9a24ba5423f18c762c8598ad628f2db0.exe

  • Size

    3.1MB

  • MD5

    423b006f029fefffb2b6538f4ce19446

  • SHA1

    bb1b34613abd61941e862d914e448cf38b1afb91

  • SHA256

    3f7d924b55c561fe2d41be336695a45f9a24ba5423f18c762c8598ad628f2db0

  • SHA512

    5a9befba339285c9e32eb1697c531ef4855f118eda19ed5f867527b20d1a1bd0ef37a3ed02ffafcf297dce75eb96d3d75750dce0c71ce6aa3493c7c7a3f4c6fe

  • SSDEEP

    49152:w4mkLcS+n5bM4Fppk4GIrLhHpt+8R9vpdOFki+r5u8Qe:w4FLcS+N5Fpi3U1Bfvpd7K

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3f7d924b55c561fe2d41be336695a45f9a24ba5423f18c762c8598ad628f2db0.exe
    "C:\Users\Admin\AppData\Local\Temp\3f7d924b55c561fe2d41be336695a45f9a24ba5423f18c762c8598ad628f2db0.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    5a2a0bdd38999f34bd51de7fbaaab2e4

    SHA1

    44b8f9c515ce84d4362a831356344ae1114efc0f

    SHA256

    f207a3b039ed44cf3eee30332b6a55aeb773962563e50a20b6d2d79798da9c09

    SHA512

    06d4ecd8cc6767e6905d634873f1ab9eddf893f64ce5639dc36f69ee5aacbc9a2030e2e23ef722655ad6bab83527ae4913465e9f9fdb44084e5237cd8380f37a

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    12KB

    MD5

    ec2540a224c7dee14fbeeb079c9f17ae

    SHA1

    a6396b2038e37a979bd79bfc854ad2fe2f4f6f12

    SHA256

    8f204e43af0b01526018f3b7d024ccf073ffecdfba80fa67d2652a02761221f2

    SHA512

    acfa6a9f6bd98a8af461d2692fea0705f69b5f7d9d1ea08455ad3b703fbc688681867ea2973032fa2622e2361c499edc6e394200cb413155c3bfd3f3ff380266

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    4e3e86bd3c5163e201fce5883c2cffcd

    SHA1

    9f67f79cabba73d6a3dbb7211eb6ba9103ad5d16

    SHA256

    47f894f524c3d15e5068814b3f7eb7227ad3771b77106b50b680a3416def1e38

    SHA512

    de2fc7083e729549c78b43b0a5683c3e85f8630e07b793999e4aac420746f70110371322fab3d1ccdcd1b65127785476bd53189917343392d576c0b525c9a322