e8568f39679f67a9d153a20a72888387ad3ee0101cb9c5d9c5089fe835775d6a

Analysis

max time kernel
121s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
17/08/2023, 21:17

Target

JZRJ_INST.exe?v=20230814.exe
Size

147.0MB
MD5

fe3c87a7ccacc748a0c67f177ed9f971
SHA1

7d84f780004c22a2e0b471b573f381ae069bb0a6
SHA256

e8568f39679f67a9d153a20a72888387ad3ee0101cb9c5d9c5089fe835775d6a
SHA512

51ba8e2777605210249a35c7e91193ada3cba2b244a3bb868c24b333d65c6e008ab36ba6b4e111066ccde0fe52120782a12a0bbed12c3bfd470b29c1ca793f06
SSDEEP

3145728:tv73ihUZ6JWWMb+40qUr7Oz9Co5N7b5XpYpI1zQlAr2qf9E:NsUZz1SxqUfOsakp13q

Score

4^/10

Loads dropped DLL 2 IoCs

pid	Process
3856	JZRJ_INST.exe_v=20230814.exe
3856	JZRJ_INST.exe_v=20230814.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\JZRJ_INST.exe_v=20230814.exe
"C:\Users\Admin\AppData\Local\Temp\JZRJ_INST.exe_v=20230814.exe"
1⤵
- Loads dropped DLL
PID:3856

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsmFCF0.tmp\System.dll

Filesize
30KB

MD5
57b493f63f6a5e4b35850d38b8356d1c

SHA1
b972af1b763458ce9944935cc9aa9ee69694c33d

SHA256
74d0e7c7b322b8f5956d581cf512a9f6c40da65473db74e7eabe540052b8018e

SHA512
6883206da51ed56152e234368b9056ab3f81456bc3928853cfd0311fd1ab65798fd2257874fedeba0a21a7cafcaad7ebda73b55c90015cf7179f5529778f01b8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmFCF0.tmp\nsTBCIASkinEngine.dll

Filesize
586KB

MD5
c46a471733316658cfa7239b0b430007

SHA1
f5d58f66291d4b9ba80417683f0e1914bffc1ddb

SHA256
1c1d354c47528f822d9ec963d3e68b89953450732964f69b5fa0d4942e8e48f6

SHA512
f2f8bbfa98e1f6354a0bd57a2f089e7e4864b2e94d03fccba4c07db337a30d8085cae7cf49a08ecfdf5f854ce4c01f863872142933b7da310fffd9b80fd94093

Download Submit