37d0f53f69e3b26595872c93c8f7aeca3915dc8577a849f0eada30889a9cc028

Analysis

max time kernel
152s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
14/10/2022, 10:07

Target

37d0f53f69e3b26595872c93c8f7aeca3915dc8577a849f0eada30889a9cc028.exe
Size

69KB
MD5

dc51b209da8a187a677d4e7bb5a71abf
SHA1

ee17eff741dd178af06b85246da677b70440d0cf
SHA256

37d0f53f69e3b26595872c93c8f7aeca3915dc8577a849f0eada30889a9cc028
SHA512

7c351f047d8758760548a69bfe4d55f5d5bf0ae0857446a34927188b9590d94ef4687c2f6ab49c6865823693a77c245fcb93551711616351df1c958bc70309b3
SSDEEP

1536:4suNLvSFVVeozLpPu04Romu/BkAsjoQHj782M0DsUf:41NjcVVnLpPu045PA0I2FB

Score

7^/10

Loads dropped DLL 2 IoCs

pid	Process
836	37d0f53f69e3b26595872c93c8f7aeca3915dc8577a849f0eada30889a9cc028.exe
836	37d0f53f69e3b26595872c93c8f7aeca3915dc8577a849f0eada30889a9cc028.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\37d0f53f69e3b26595872c93c8f7aeca3915dc8577a849f0eada30889a9cc028.exe
"C:\Users\Admin\AppData\Local\Temp\37d0f53f69e3b26595872c93c8f7aeca3915dc8577a849f0eada30889a9cc028.exe"
1⤵
- Loads dropped DLL
PID:836

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsp5BE.tmp\InstallOptions.dll

Filesize
15KB

MD5
ece25721125d55aa26cdfe019c871476

SHA1
b87685ae482553823bf95e73e790de48dc0c11ba

SHA256
c7fef6457989d97fecc0616a69947927da9d8c493f7905dc8475c748f044f3cf

SHA512
4e384735d03c943f5eb3396bb3a9cb42c9d8a5479fe2871de5b8bc18db4bbd6e2c5f8fd71b6840512a7249e12a1c63e0e760417e4baa3dc30f51375588410480

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsp5BE.tmp\InstallOptions.dll

Filesize
15KB

MD5
ece25721125d55aa26cdfe019c871476

SHA1
b87685ae482553823bf95e73e790de48dc0c11ba

SHA256
c7fef6457989d97fecc0616a69947927da9d8c493f7905dc8475c748f044f3cf

SHA512
4e384735d03c943f5eb3396bb3a9cb42c9d8a5479fe2871de5b8bc18db4bbd6e2c5f8fd71b6840512a7249e12a1c63e0e760417e4baa3dc30f51375588410480

Download Submit