Analysis

  • max time kernel
    150s
  • max time network
    30s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2023 11:47

General

  • Target

    a4b0f2de37c5c22359a9476c2a0801037c30e959072600fb190c8dd84f188154.exe

  • Size

    342KB

  • MD5

    7929264ef727a67fdab7ac3f8bdbe22e

  • SHA1

    ac36d09440369630f9dec4ba51c6deaa164f0cab

  • SHA256

    a4b0f2de37c5c22359a9476c2a0801037c30e959072600fb190c8dd84f188154

  • SHA512

    aac406b35d54986447ec154b01ce83ac240f8e446a32f03a0f0b9fea5c376c3e06171d27851dd6bf62795d860f94f498e65bee5e77a0dfff6f38266919c95365

  • SSDEEP

    6144:TlJZfc57McFyWUH9NmVuYV4+ADY7vBxDOPK+/GcO4dQgE0B/SGso8djsfGeOsFo:TlE57byWem4SRBxYK+O4drEuRFCc/Os+

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\a4b0f2de37c5c22359a9476c2a0801037c30e959072600fb190c8dd84f188154.exe
    "C:\Users\Admin\AppData\Local\Temp\a4b0f2de37c5c22359a9476c2a0801037c30e959072600fb190c8dd84f188154.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Windows directory
    PID:1300

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\nsoAE4C.tmp\System.dll

    Filesize

    11KB

    MD5

    fc90dfb694d0e17b013d6f818bce41b0

    SHA1

    3243969886d640af3bfa442728b9f0dff9d5f5b0

    SHA256

    7fe77ca13121a113c59630a3dba0c8aaa6372e8082393274da8f8608c4ce4528

    SHA512

    324f13aa7a33c6408e2a57c3484d1691ecee7c3c1366de2bb8978c8dc66b18425d8cab5a32d1702c13c43703e36148a022263de7166afdce141da2b01169f1c6