316b95c1fc029bdf493b752d9917cd895dbfb5ddf9a4561b27efb3728d3d74e4

Analysis

max time kernel
151s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
13/06/2023, 17:22

Target

OpenSCAD-2015.03-2-x86-64-Installer.exe
Size

13.7MB
MD5

292d9f77b95999fb9fdd750c8f337db9
SHA1

0e307727f27aa08cc5f1f358e4e9d0fd416cd68f
SHA256

316b95c1fc029bdf493b752d9917cd895dbfb5ddf9a4561b27efb3728d3d74e4
SHA512

501fb4b0ad06ee87ab7db850a3a32817d5fce1dce075f1fbd628010310813087700ccfb29b85777e847568e4cb81d3e5416071fecc8a3e8e336738096dbc8fcb
SSDEEP

393216:7af/JS2OkOt5vYizEl1s7Ku+uq1H99P7wlmoRJ:7a3JS2otlYEErsJ+u68Tr

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1988	OpenSCAD-2015.03-2-x86-64-Installer.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\OpenSCAD-2015.03-2-x86-64-Installer.exe
"C:\Users\Admin\AppData\Local\Temp\OpenSCAD-2015.03-2-x86-64-Installer.exe"
1⤵
- Loads dropped DLL
PID:1988

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

\Users\Admin\AppData\Local\Temp\nst14DA.tmp\System.dll

Filesize
24KB

MD5
6c09648818cf6820a769e8f03c28645d

SHA1
30bf9117443955d50e396a799792746107a282c3

SHA256
4263984428f49792f359b91d5eee19b6d248340204051dd14af9a73710967dc7

SHA512
f10443c9fa469b778aeb0911f656ebeaadfa4519ba40397775b633da75309f09759745390c27df0be0650988f90716791b6043bb269db3890f9a9171d5666319

Download Submit
memory/1988-59-0x0000000000400000-0x0000000000443000-memory.dmp

Filesize
268KB

Download
memory/1988-60-0x000000006E5C0000-0x000000006E5CD000-memory.dmp

Filesize
52KB

Download