f4baaa8135e0f9a993f0258a4d095db475096896bd3adb48369f1f70c1f0d9d4

Analysis

max time kernel
142s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
11-07-2023 19:45

Target

vlc-3.0.18-win32.exe
Size

40.8MB
MD5

6dc33df9e4a089a39e5e3a4e1932de67
SHA1

5c82fe5bab170139c5337f5826bc11f67bcdcb8e
SHA256

f4baaa8135e0f9a993f0258a4d095db475096896bd3adb48369f1f70c1f0d9d4
SHA512

1f189a30ae3d98ae21b1ca2d8c87074f42c0a643261c0e8f8125e5b5e4176079847be2ede348c278c07596e333af430a9114ff0d36b61e8a8e32755b03368905
SSDEEP

786432:F87DNeXbdh8M6OI8ut/NgZb4YrAXJapq3iZ6qeoeTD+HgEc68ebBEi/S+hbyrpwg:4UbdhqOIvtVNYWwq3pOeTDMC7ebBBS+e

Score

4^/10

Loads dropped DLL 3 IoCs

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\vlc-3.0.18-win32.exe
"C:\Users\Admin\AppData\Local\Temp\vlc-3.0.18-win32.exe"
1⤵
- Loads dropped DLL
PID:4016

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nst8F61.tmp\LangDLL.dll

Filesize
7KB

MD5
20850d4d5416fbfd6a02e8a120f360fc

SHA1
ac34f3a34aaa4a21efd6a32bc93102639170e219

SHA256
860b409b065b747aab2a9937f02d08b6fd7309993b50d8e4b53983c8c2b56b61

SHA512
c8048b9ae0ced72a384c5ab781083a76b96ae08d5c8a5c7797f75a7e54e9cd9192349f185ee88c9cf0514fc8d59e37e01d88b9c8106321c0581659ebe1d1c276

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8F61.tmp\System.dll

Filesize
26KB

MD5
4f25d99bf1375fe5e61b037b2616695d

SHA1
958fad0e54df0736ddab28ff6cb93e6ed580c862

SHA256
803931797d95777248dee4f2a563aed51fe931d2dd28faec507c69ed0f26f647

SHA512
96a8446f322cd62377a93d2088c0ce06087da27ef95a391e02c505fb4eb1d00419143d67d89494c2ef6f57ae2fd7f049c86e00858d1b193ec6dde4d0fe0e3130

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8F61.tmp\nsDialogs.dll

Filesize
12KB

MD5
2029c44871670eec937d1a8c1e9faa21

SHA1
e8d53b9e8bc475cc274d80d3836b526d8dd2747a

SHA256
a4ae6d33f940a80e8fe34537c5cc1f8b8679c979607969320cfb750c15809ac2

SHA512
6f151c9818ac2f3aef6d4cabd8122c7e22ccf0b84fa5d4bcc951f8c3d00e8c270127eac1e9d93c5f4594ac90de8aff87dc6e96562f532a3d19c0da63a28654b7

Download Submit
memory/4016-147-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/4016-148-0x0000000074C20000-0x0000000074C2E000-memory.dmp

Filesize
56KB

Download
memory/4016-149-0x0000000074C10000-0x0000000074C1B000-memory.dmp

Filesize
44KB

Download