a4b0f2de37c5c22359a9476c2a0801037c30e959072600fb190c8dd84f188154

Analysis

max time kernel
150s
max time network
30s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
09-05-2023 11:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a4b0f2de37c5c22359a9476c2a0801037c30e959072600fb190c8dd84f188154.exe
Size

342KB
MD5

7929264ef727a67fdab7ac3f8bdbe22e
SHA1

ac36d09440369630f9dec4ba51c6deaa164f0cab
SHA256

a4b0f2de37c5c22359a9476c2a0801037c30e959072600fb190c8dd84f188154
SHA512

aac406b35d54986447ec154b01ce83ac240f8e446a32f03a0f0b9fea5c376c3e06171d27851dd6bf62795d860f94f498e65bee5e77a0dfff6f38266919c95365
SSDEEP

6144:TlJZfc57McFyWUH9NmVuYV4+ADY7vBxDOPK+/GcO4dQgE0B/SGso8djsfGeOsFo:TlE57byWem4SRBxYK+O4drEuRFCc/Os+

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
1300	a4b0f2de37c5c22359a9476c2a0801037c30e959072600fb190c8dd84f188154.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Fonts\Cassiterite\outspurt\Gstelrere\Aabenthusdags32.For	a4b0f2de37c5c22359a9476c2a0801037c30e959072600fb190c8dd84f188154.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\a4b0f2de37c5c22359a9476c2a0801037c30e959072600fb190c8dd84f188154.exe
"C:\Users\Admin\AppData\Local\Temp\a4b0f2de37c5c22359a9476c2a0801037c30e959072600fb190c8dd84f188154.exe"
1⤵
- Loads dropped DLL
- Drops file in Windows directory
PID:1300

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\Temp\nsoAE4C.tmp\System.dll

Filesize
11KB

MD5
fc90dfb694d0e17b013d6f818bce41b0

SHA1
3243969886d640af3bfa442728b9f0dff9d5f5b0

SHA256
7fe77ca13121a113c59630a3dba0c8aaa6372e8082393274da8f8608c4ce4528

SHA512
324f13aa7a33c6408e2a57c3484d1691ecee7c3c1366de2bb8978c8dc66b18425d8cab5a32d1702c13c43703e36148a022263de7166afdce141da2b01169f1c6

Download Submit