4a7f4bd701c3cf8413fa774655dc5520992289abfe562ce0967e59f2179978ff | Triage

Analysis

max time kernel
31s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
30-05-2023 18:53

Sharing

Report Analysis Logs

General

Target

NFSU2-ProfileCreator.exe
Size

988KB
MD5

3280d96356f9c2806b4e865ecf42a76e
SHA1

97546902232211b8fefe1e420c8542504a5179bb
SHA256

255f506924b2bd50ec8476d006170fd2517b861e96d6122ccaba7d6b261c14da
SHA512

cef891a29c48bb2b722e0a3a2c77ee3e46ce1d3c4f48490f21b764df2e51b5002bb5ce9fcaef1499a940c21f8ce362bc1066355494fb1246ba7e521f4cce7c00
SSDEEP

24576:qnZln/UYEpBbz8e1pUrsoBct181HVMH8:qnz/UYEpBbzdoso2t6dWH8

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1720	NFSU2-ProfileCreator.exe

C:\Users\Admin\AppData\Local\Temp\NFSU2-ProfileCreator.exe
"C:\Users\Admin\AppData\Local\Temp\NFSU2-ProfileCreator.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1720

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads