4117cfa44e461122d319394e630e4836d6977b949de9a678e13c4772a10f6df9

Analysis

max time kernel
139s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
09/08/2023, 12:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Scan_0024034 pdf.exe
Size 454KB
Sample230809-psxkvsbc34
SHA256 4117cfa44e461122d319394e630e4836d6977b949de9a678e13c4772a10f6df9
MD5 9c119ae4550475cfbdc9d3ee5f73b5f5
SHA1 3db0844c2ff760a2d8f07c6de1d2efca8ec3c76f
SHA512 d2b6eddd5464aac991adffe06a90781b28533077117dab95f53b2c9fcdaf4cee0887a248f93a4fed0f3812b69ebc61e7a839eaac29171fb6b2bf408fff0c44df
SSDEEP 6144:DlgvTRHybTTGup5sbH+iJ8sCYkv+fVERRRbxMI9hnPrYxmMltkb8e+LF03bx2:J2wGus2sCYk+dETRbiIznQVC85i3bM
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
996	Scan_0024034 pdf.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\Scan_0024034 pdf.exe
"C:\Users\Admin\AppData\Local\Temp\Scan_0024034 pdf.exe"
1⤵
- Loads dropped DLL
PID:996

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nspB77A.tmp\System.dll
Size 11KB
SHA256 a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
MD5 75ed96254fbf894e42058062b4b4f0d1
SHA1 996503f1383b49021eb3427bc28d13b5bbd11977
SHA512 58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4
SSDEEP 192:X24sihno0bW+l97H4GB7QDs91kMtwtobTr4u+QHbazMNHT7dmNIEr:m8vJl97JeoxtN/r3z7YV
MD5 SHA1 SHA512 SSDEEP

Submit Download