360dacc511bc68e881d43fbcf5f71fd7f5b88374468fa4db78c54dd95987cba3

Analysis

max time kernel
156s
max time network
200s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 19:03

Target

360dacc511bc68e881d43fbcf5f71fd7f5b88374468fa4db78c54dd95987cba3.exe
Size

7.8MB
MD5

d5508facf98d7866cc0c52a33eda15f7
SHA1

ec37b9fe4cad314e84d8b2f941b383f01c00887a
SHA256

360dacc511bc68e881d43fbcf5f71fd7f5b88374468fa4db78c54dd95987cba3
SHA512

d8240bb7320fc7b1519dd14e29b812dfefbf0a67c8a8f864865ec2f4e3a4bd991cc36acedb31a0aa6a5713dc2328f89342f2d3a261d500e02df458163d2cae14
SSDEEP

196608:gxhcq9cWzRePiVK/JciBZO3+SZXUpVfTM5oi0CHOwhDX6xf9TyyQ2h:gDcq9Jz3YJjBwS3LM5oDgOwB6N9X5

Score

7^/10

Loads dropped DLL 1 IoCs

Processes:

360dacc511bc68e881d43fbcf5f71fd7f5b88374468fa4db78c54dd95987cba3.exe

pid process

4056 360dacc511bc68e881d43fbcf5f71fd7f5b88374468fa4db78c54dd95987cba3.exe
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

pid	process
4056	360dacc511bc68e881d43fbcf5f71fd7f5b88374468fa4db78c54dd95987cba3.exe

C:\Users\Admin\AppData\Local\Temp\360dacc511bc68e881d43fbcf5f71fd7f5b88374468fa4db78c54dd95987cba3.exe
"C:\Users\Admin\AppData\Local\Temp\360dacc511bc68e881d43fbcf5f71fd7f5b88374468fa4db78c54dd95987cba3.exe"
1⤵
- Loads dropped DLL
PID:4056

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nss33C4.tmp\InstallOptions.dll

Filesize
14KB

MD5
0dc0cc7a6d9db685bf05a7e5f3ea4781

SHA1
5d8b6268eeec9d8d904bc9d988a4b588b392213f

SHA256
8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

SHA512
814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

Download Submit