f15224e3e325ad3dadc32bc673a01de87ad11476fccd52ff8543f8deec7f715d

Analysis

max time kernel
45s
max time network
34s
platform
windows7_x64
resource
win7-20230220-es
resource tags

arch:x64arch:x86image:win7-20230220-eslocale:es-esos:windows7-x64systemwindows
submitted
08/03/2023, 03:46

Target

SteelSeriesGG33.0.0Setup.exe
Size

269.6MB
MD5

79e8c9b0116f24190399de55f0df12da
SHA1

5de0056922e6f195968f120209019d8680761056
SHA256

f15224e3e325ad3dadc32bc673a01de87ad11476fccd52ff8543f8deec7f715d
SHA512

2c25ab3a20d5286752f222edefb14034709c490a177b3e2a05e28278be63f7598869aeab763047a3236da8a35d578d47a5cc7b5ae3367d44fe54f6304843bae6
SSDEEP

6291456:XLRtDDI7tbCY7t7bgQXBfGTNeJWME9gj8NHgqETKrACzV7F:FtstbN7tpuZ8/w9PV

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1268	SteelSeriesGG33.0.0Setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\SteelSeriesGG33.0.0Setup.exe
"C:\Users\Admin\AppData\Local\Temp\SteelSeriesGG33.0.0Setup.exe"
1⤵
- Loads dropped DLL
PID:1268

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsy545A.tmp\System.dll

Filesize
12KB

MD5
564bb0373067e1785cba7e4c24aab4bf

SHA1
7c9416a01d821b10b2eef97b80899d24014d6fc1

SHA256
7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5

SHA512
22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472

Download Submit
\Users\Admin\AppData\Local\Temp\nsy545A.tmp\System.dll

Filesize
12KB

MD5
564bb0373067e1785cba7e4c24aab4bf

SHA1
7c9416a01d821b10b2eef97b80899d24014d6fc1

SHA256
7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5

SHA512
22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472

Download Submit