57dc1a281905c4a7f12ed5f2e26e1fecaba04cda44f9bb4110dc2c5f6e321658

Resubmissions

20/07/2023, 13:30

230720-qrwgvagg847

20/07/2023, 13:18

230720-qj37qahc5z10

Analysis

max time kernel
803s
max time network
1128s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
20/07/2023, 13:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Telex_MEDUPO188339.scr
Size 341KB
Sample230720-qrwgvagg84
SHA256 57dc1a281905c4a7f12ed5f2e26e1fecaba04cda44f9bb4110dc2c5f6e321658
MD5 b92c138111adc794605849f888ce286e
SHA1 b817be8c3a9cc313a77968a09aa74ff5fdfb4eeb
SHA512 abf6b0acaa42ae6d588409ea5b6d93ed9bc7b5523129d45bda9b094cb6546ebe0f0c8956c3af7982c1f27f95a008e4fa06b8b30f43faf10e30aef28ea8c19524
SSDEEP 6144:44t6Lsc1u+jom7OZgVwy6NlTFWmtiUToRNH35CfrfTuiJRK8rFMQuX5d3M0V55uv:4kcg+MAOZgVwyAiUY8frfTue3rFMb75K
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2248	Telex_MEDUPO188339.scr

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\Telex_MEDUPO188339.scr
"C:\Users\Admin\AppData\Local\Temp\Telex_MEDUPO188339.scr" /S
1⤵
- Loads dropped DLL
PID:2248

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsu1162.tmp\System.dll
Size 11KB
SHA256 bd046e6497b304e4ea4ab102cab2b1f94ce09bde0eebba4c59942a732679e4eb
MD5 17ed1c86bd67e78ade4712be48a7d2bd
SHA1 1cc9fe86d6d6030b4dae45ecddce5907991c01a0
SHA512 0cbed521e7d6d1f85977b3f7d3ca7ac34e1b5495b69fd8c7bfa1a846baf53b0ecd06fe1ad02a3599082ffacaf8c71a3bb4e32dec05f8e24859d736b828092cd5
SSDEEP 192:eY24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol+Sl:E8QIl975eXqlWBrz7YLOl+
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/2248-140-0x0000000003090000-0x0000000003C75000-memory.dmp

Download

memory/2248-141-0x0000000003090000-0x0000000003C75000-memory.dmp