Analysis

  • max time kernel
    148s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-05-2024 12:15

General

  • Target

    5178a643c03b92ee9b2f9a1545fd560dd712521596d46558dd141ee6e7abc03d.exe

  • Size

    4.1MB

  • MD5

    e8268ab92ca9689b603eb923b75a59fd

  • SHA1

    cbba2f68e793d3f04b5990ea524612afbfde29bb

  • SHA256

    5178a643c03b92ee9b2f9a1545fd560dd712521596d46558dd141ee6e7abc03d

  • SHA512

    d7cf70d4d85c857e2e03a2fb8119a5a2fc213fd6c91f463a6b56b2b303150f233291297b051d739f463614e9533ca387ea1fa357678f5f7ab93623ad7beb1e0d

  • SSDEEP

    98304:a4L732uynn6mPdqmi3OqVIssVKdzOJDb4v+qd:pKvcZ3OqVcwwN0v+q

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5178a643c03b92ee9b2f9a1545fd560dd712521596d46558dd141ee6e7abc03d.exe
    "C:\Users\Admin\AppData\Local\Temp\5178a643c03b92ee9b2f9a1545fd560dd712521596d46558dd141ee6e7abc03d.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    a7b99eb97202b9d4d7381480a5bfd420

    SHA1

    8d35eaf3c9f6736acb086a1fb8ee37365e160979

    SHA256

    72cbf1dbf32a1e6e98e17a954d877993759715855ac33bd862ed75befa9e84db

    SHA512

    cd08c2e4e56cd6b8cc6acfce83f01eabbc6d93bdc28c55346bd2ee1e1bb1da97014d3a683a45de803578e9fb56839ac2d04d77f5ca5db107d15c3cc2eb51a64c

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    8KB

    MD5

    84a6d8b6b1b11ce4a3b46b0c351c15c8

    SHA1

    c03284d75d9226fd0a087e821fa49417c18abc41

    SHA256

    42c77f9f5d9170d0875ea4bc3c8d349cd287953ccf9b172e91af1503a7d687ac

    SHA512

    07134aeda34f27c86b9236a3dc7d6850996901833d77970015c75a31e480dff5b3067f5482a9012f56b3cfcb204f09740213b45540a4355e31a8fcd49b6a17fb

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    fa9cf49b0f001abe88a1695c60dcaa60

    SHA1

    d0b1279b16e5db779e7e13f229da78d52d06348e

    SHA256

    e8b95ed7ab437353a7718d9c7bc26b34d60897b850f4809ee44d256bc2e5c398

    SHA512

    b8308a4fd9c070913b5e0491aac8440613ed5e570cd17a66f25b7e5cae14b7f782db2b86ab0b35367913c64c0146b61a82b84b8e335af631a133bacd832504ef

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    489daa356ad750f0acb7e894eb8d0bac

    SHA1

    f93cbafb7e56130f9195eaa6d249fc91d4adbb63

    SHA256

    e8ce3c86e5d8a0447aea01ae6adcc42d4ecd88be7d4052704183e18059c7d363

    SHA512

    f9e23cb835324145a4343eeb759d7455a9101059ef87b635c0589f92f76f9a81f162a7cb65a3fb5435c7e3160138cf90bbceccfe821641744634518384f934cc