6a25d3deda56844c6ea3202c239257d94280dd3b3a56c517616e17d0fb8ee60f

Analysis

max time kernel
135s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
11/06/2023, 10:38

Target

MSIAfterburnerSetup465.exe
Size

53.4MB
MD5

38404e93313965e5a1120df7f41ea13c
SHA1

c45b093120627cce2006f2497d3a611175e8f6b2
SHA256

0ce5e5be2bd5eea2fe56e9332eb9f7aee3d7c78df61fe41ba3fde8e268076f12
SHA512

f7e1b10a85f347971b3618003953ce12d1fee1cadb4cab6f606707d2b2ffe6470e9abc30f660818bd74e66bb60f761344278dee35fb05ae00eba170e371c0e1b
SSDEEP

1572864:wmnOEc9uXqGt76mP7e5Gt76FPRX8i7kpOMPp:wmOfszt7TeYt7xZAMPp

Score

7^/10

Loads dropped DLL 2 IoCs

pid	Process
1432	MSIAfterburnerSetup465.exe
1432	MSIAfterburnerSetup465.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\MSIAfterburnerSetup465.exe
"C:\Users\Admin\AppData\Local\Temp\MSIAfterburnerSetup465.exe"
1⤵
- Loads dropped DLL
PID:1432

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nszBABA.tmp\LangDLL.dll

Filesize
5KB

MD5
08de81a4584f5201086f57a7a93ed83b

SHA1
266a6ecc8fb7dca115e6915cd75e2595816841a8

SHA256
4883cd4231744be2dca4433ef62824b7957a3c16be54f8526270402d9413ebe6

SHA512
b72e7cea5ce1f4dc64e65a1f683a3ef9e3fa2dc45cf421f569eb461f1fdcc0caf4ff62a872e62b400579f567c6ff9fc3c2e6e020cdca89d96015502c803a09b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nszBABA.tmp\nsDialogs.dll

Filesize
9KB

MD5
ca5bb0ee2b698869c41c087c9854487c

SHA1
4a8abbb2544f1a9555e57a142a147dfeb40c4ca4

SHA256
c719697d5ced17d97bbc48662327339ccec7e03f6552aa1d5c248f6fa5f16324

SHA512
363a80843d7601ba119bc981c4346188f490b388e3ed390a0667aaf5138b885eec6c69d4e7f60f93b069d6550277f4c926bd0f37bc893928111dc62494124770

Download Submit