a790aabb6892eb48275bb661288c2310c9da955fa6dc34070a264ad717a7c6d9

Analysis

max time kernel
150s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
09/05/2023, 12:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a790aabb6892eb48275bb661288c2310c9da955fa6dc34070a264ad717a7c6d9.exe
Size

327KB
MD5

f3cbfb3abd596790a4ed2658f0f13b5f
SHA1

f7a14d7b56c821fbb22c6a36103fc4c05068ee7f
SHA256

a790aabb6892eb48275bb661288c2310c9da955fa6dc34070a264ad717a7c6d9
SHA512

bd97ae72fb046dd1a1bcf354cc3f6f7ec8b5a710083e38215702b7247e2ced1ed41bd7c96b35be8c46d97df9af801006879868ce8c3e7fc6c3a8c07b0b860426
SSDEEP

6144:TlJZfc57McFEJu8jRIU0aU5aKBY7X+jsEmLL1dwI0mo:TlE57bELKU0h5TBQOaH16R3

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
924	a790aabb6892eb48275bb661288c2310c9da955fa6dc34070a264ad717a7c6d9.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Fonts\Cassiterite\outspurt\Gstelrere\Aabenthusdags32.For	a790aabb6892eb48275bb661288c2310c9da955fa6dc34070a264ad717a7c6d9.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\a790aabb6892eb48275bb661288c2310c9da955fa6dc34070a264ad717a7c6d9.exe
"C:\Users\Admin\AppData\Local\Temp\a790aabb6892eb48275bb661288c2310c9da955fa6dc34070a264ad717a7c6d9.exe"
1⤵
- Loads dropped DLL
- Drops file in Windows directory
PID:924

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\Temp\nsyAF74.tmp\System.dll

Filesize
11KB

MD5
fc90dfb694d0e17b013d6f818bce41b0

SHA1
3243969886d640af3bfa442728b9f0dff9d5f5b0

SHA256
7fe77ca13121a113c59630a3dba0c8aaa6372e8082393274da8f8608c4ce4528

SHA512
324f13aa7a33c6408e2a57c3484d1691ecee7c3c1366de2bb8978c8dc66b18425d8cab5a32d1702c13c43703e36148a022263de7166afdce141da2b01169f1c6

Download Submit