9ad94013441684622fbbad4f17fe7bc66249851c61c803ea7887f3d92cd01330

Analysis

max time kernel
142s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
24/07/2023, 13:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

IBM_Centosi.exe
Size

386KB
MD5

bd26522adc6d72599684c7623e61ccc2
SHA1

f835da6fca37881c29edad8e14061ea43e1d3e39
SHA256

9ad94013441684622fbbad4f17fe7bc66249851c61c803ea7887f3d92cd01330
SHA512

dbdbaeb297ffc5bd62c30e4de0f3240465304a556a22b8bdc8232cae2f7ab22a5d6235fdd6f343b2a5cffc614fd86d4d2f8a2d458ffb6c575490b8661a1591c9
SSDEEP

12288:4iuXtDKp9x6iYtSacUE78BxY7RTNLUD2ZYZk7:EKr6iYoacUE7om7222c

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2744	IBM_Centosi.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\IBM_Centosi.exe
"C:\Users\Admin\AppData\Local\Temp\IBM_Centosi.exe"
1⤵
- Loads dropped DLL
PID:2744

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsi7571.tmp\System.dll

Filesize
11KB

MD5
be2621a78a13a56cf09e00dd98488360

SHA1
75f0539dc6af200a07cdb056cddddec595c6cfd2

SHA256
852047023ba0cae91c7a43365878613cfb4e64e36ff98c460e113d5088d68ef5

SHA512
b80cf1f678e6885276b9a1bfd9227374b2eb9e38bb20446d52ebe2c3dba89764aa50cb4d49df51a974478f3364b5dbcbc5b4a16dc8f1123b40c89c01725be3d1

Download Submit