Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/06/2024, 19:11

General

  • Target

    1b2ab649ed255e30b79fcd86e1004c628c0bde4dceb6cc7e67572e61a855b71f.exe

  • Size

    9.8MB

  • MD5

    419d41c1edac9f4e76e08f0845373157

  • SHA1

    338fc3421829ab239315d06520e93120daaedc1b

  • SHA256

    1b2ab649ed255e30b79fcd86e1004c628c0bde4dceb6cc7e67572e61a855b71f

  • SHA512

    64b8d9ce83fb4f0d012457424007603208c5fabcd1b644bc800b5743456d82fce04b67986d2b4dfd048f430ae32bc74ad0a98145bbf155ff637de9c1036fc928

  • SSDEEP

    196608:wwbSSJ7PbDdh0HtQba8z1sjzkAilU4I4:wwb5J7PbDjOQba8psjzyz

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1b2ab649ed255e30b79fcd86e1004c628c0bde4dceb6cc7e67572e61a855b71f.exe
    "C:\Users\Admin\AppData\Local\Temp\1b2ab649ed255e30b79fcd86e1004c628c0bde4dceb6cc7e67572e61a855b71f.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    4KB

    MD5

    2ebd5455803e26b84e53c473a60d16d5

    SHA1

    9a057bd826142f242e4999d0ad456aa95c710976

    SHA256

    74e67bab8b13964d7c81d3717b93ba0c291429c2101d37deaa41abbbe0c7cc39

    SHA512

    b20018a3a1cdfa5881289e0350230862a881fb8e52ef85a67363d4cc9fb65c5533e6a2152c87ca31c32643f3ebf2607b5255b97934e4e9b1706aa97b77298f82

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    4dfde6a152d6aef75a55673f3f335964

    SHA1

    4eae355b9a4dd563f0f89e428e4824998fc67f43

    SHA256

    8ab5b0de679cd2d9d81bb962f255573982bf9d83a901b232984b56f79d5f2d96

    SHA512

    a1a56bc948dae3a76c6c018f259152c607d6dba73d7df0c411b9ba1096f8c4cf81bf804f2685d6fb87efc924ce4a96f61c143ee6a48b09651eb83b46e716dffe