9fc9f0ba3810871689e7bef9dd0739ee9679ff48ca8be1ab5c15ee5fd556045e

Analysis

max time kernel
91s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20221111-es
resource tags

arch:x64arch:x86image:win10v2004-20221111-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
01-01-2023 21:04

Target

AllAcro86.exe
Size

1.8MB
MD5

3a8e270abd328c59f307363a06543261
SHA1

58dafe8b01f4ba71eb6cab770e7dde2749b6f1b9
SHA256

9fc9f0ba3810871689e7bef9dd0739ee9679ff48ca8be1ab5c15ee5fd556045e
SHA512

b7bf25e3550671340913d40a8ce24e1eef06a5989ce82da83073f4fd80bcf0ae146075e480967ea2c4d4e9a5a9c50042e242924c331836a6675dded68b9d76fc
SSDEEP

24576:pYtcjUT/G75uxqDp9Xc9L+pEKgwC/pS/1tvJ99TS7TWLGtg4LC4kpM87hgtpoa6v:W6s67DDXG+GL527vxG64wKp6v

Score

7^/10

Loads dropped DLL 2 IoCs

pid	Process
4284	AllAcro86.exe
4284	AllAcro86.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\AllAcro86.exe
"C:\Users\Admin\AppData\Local\Temp\AllAcro86.exe"
1⤵
- Loads dropped DLL
PID:4284

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nss816C.tmp\System.dll

Filesize
12KB

MD5
cff85c549d536f651d4fb8387f1976f2

SHA1
d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

SHA256
8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

SHA512
531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

Download Submit
C:\Users\Admin\AppData\Local\Temp\nss816C.tmp\UserInfo.dll

Filesize
4KB

MD5
2f69afa9d17a5245ec9b5bb03d56f63c

SHA1
e0a133222136b3d4783e965513a690c23826aec9

SHA256
e54989d2b83e7282d0bec56b098635146aab5d5a283f1f89486816851ef885a0

SHA512
bfd4af50e41ebc56e30355c722c2a55540a5bbddb68f1522ef7aabfe4f5f2a20e87fa9677ee3cdb3c0bf5bd3988b89d1224d32c9f23342a16e46c542d8dc0926

Download Submit