6b2491efaed78fff219411ee1f9209caf70f47e6626daafca94a6389e2dd8cdb

Analysis

max time kernel
119s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
21/09/2023, 21:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

intellij--ideaIC-2023.2.2.exe
Size

664.4MB
MD5

39bdd4dd6e75114dfb5551edaf2c7985
SHA1

721bedb723fba9e5ea45de48931f9cf765dae6df
SHA256

6b2491efaed78fff219411ee1f9209caf70f47e6626daafca94a6389e2dd8cdb
SHA512

6c29816542efbb604a311c64c402236f0c1b79b68264d9c807facb73e9e0ba50f22b1981060fbb6d6ab7f3ef81ed4ca3fdbfc306ba2ef3a0e69e5935cc8ad487
SSDEEP

12582912:xFtEMcYROlVzsApNbgyQ84045eyOCZq6fZyaaIMr/oKUslv0cQeb:xFiYROlSwLQf094fAab05jvGeb

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 6 IoCs

pid	Process
2348	intellij--ideaIC-2023.2.2.exe
2348	intellij--ideaIC-2023.2.2.exe
2348	intellij--ideaIC-2023.2.2.exe
2348	intellij--ideaIC-2023.2.2.exe
2348	intellij--ideaIC-2023.2.2.exe
2348	intellij--ideaIC-2023.2.2.exe

Drops desktop.ini file(s) 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Temp\nsd1E0.tmp\Desktop.ini	intellij--ideaIC-2023.2.2.exe
File opened for modification	C:\Users\Admin\AppData\Local\Temp\nsd1E0.tmp\Desktop.ini	intellij--ideaIC-2023.2.2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\intellij--ideaIC-2023.2.2.exe
"C:\Users\Admin\AppData\Local\Temp\intellij--ideaIC-2023.2.2.exe"
1⤵
- Loads dropped DLL
- Drops desktop.ini file(s)
PID:2348

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsd1E0.tmp\Desktop.ini

Filesize
2KB

MD5
74abf7fb506f5fe0fc5e19366f195638

SHA1
bf80fef0f81ba4846be83c2939de6e23dbb60825

SHA256
de428b0d3d4d8e7c1fa62ff25b1959644e5f4cf79d6b4d7399f5ca500d277f22

SHA512
354e70190d6512572a9f7f3920a37922ed968305e93fe2ef7ceef5cb0f5b606393840f6a2cffc04fb7bdfeec4f191f5e8355dc38895286216e36d27dc45981eb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd1E0.tmp\InstallOptions.dll

Filesize
15KB

MD5
0a9fb96a7579b685ec36b17fc354e6a3

SHA1
355754104dd47d5fcf8918dee0dc2e2ee53390a6

SHA256
b34fb342f21d690aac024b6f48a597e78d15791ef480ac55159cd585d0f64af7

SHA512
67870206fa7f1e7df45c8c1bc2f51fb430f0a048a2bdb55a4a41525388ca3b50203784537f139169705a03db4bb13b591162a79a5d2df81a4d11fd849615c86b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd1E0.tmp\InstallOptions.dll

Filesize
15KB

MD5
0a9fb96a7579b685ec36b17fc354e6a3

SHA1
355754104dd47d5fcf8918dee0dc2e2ee53390a6

SHA256
b34fb342f21d690aac024b6f48a597e78d15791ef480ac55159cd585d0f64af7

SHA512
67870206fa7f1e7df45c8c1bc2f51fb430f0a048a2bdb55a4a41525388ca3b50203784537f139169705a03db4bb13b591162a79a5d2df81a4d11fd849615c86b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd1E0.tmp\InstallOptions.dll

Filesize
15KB

MD5
0a9fb96a7579b685ec36b17fc354e6a3

SHA1
355754104dd47d5fcf8918dee0dc2e2ee53390a6

SHA256
b34fb342f21d690aac024b6f48a597e78d15791ef480ac55159cd585d0f64af7

SHA512
67870206fa7f1e7df45c8c1bc2f51fb430f0a048a2bdb55a4a41525388ca3b50203784537f139169705a03db4bb13b591162a79a5d2df81a4d11fd849615c86b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd1E0.tmp\InstallOptions.dll

Filesize
15KB

MD5
0a9fb96a7579b685ec36b17fc354e6a3

SHA1
355754104dd47d5fcf8918dee0dc2e2ee53390a6

SHA256
b34fb342f21d690aac024b6f48a597e78d15791ef480ac55159cd585d0f64af7

SHA512
67870206fa7f1e7df45c8c1bc2f51fb430f0a048a2bdb55a4a41525388ca3b50203784537f139169705a03db4bb13b591162a79a5d2df81a4d11fd849615c86b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd1E0.tmp\System.dll

Filesize
12KB

MD5
564bb0373067e1785cba7e4c24aab4bf

SHA1
7c9416a01d821b10b2eef97b80899d24014d6fc1

SHA256
7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5

SHA512
22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd1E0.tmp\UAC.dll

Filesize
14KB

MD5
adb29e6b186daa765dc750128649b63d

SHA1
160cbdc4cb0ac2c142d361df138c537aa7e708c9

SHA256
2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

SHA512
b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd1E0.tmp\UninstallOldVersions.ini

Filesize
2KB

MD5
6f228692d94d0f69066f0ee5a6f87b13

SHA1
580c36ff9e064895aa953a72433adf0a92d553ff

SHA256
f81968a074401c2a5efd6166b8826cedfdbf66ea1a381969510c7d1fb5428607

SHA512
778efceeadf56dc9e54087a8ae95c6074eb72eb86ccf1454164c5233f5d449cf5d67d4648ce23fb7fc3895b6feaef6eaf01d636f1069667458fcef973b9211f9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd1E0.tmp\nsDialogs.dll

Filesize
9KB

MD5
48f3e7860e1de2b4e63ec744a5e9582a

SHA1
420c64d802a637c75a53efc8f748e1aede3d6dc6

SHA256
6bf9cccd8a600f4d442efe201e8c07b49605ba35f49a4b3ab22fa2641748e156

SHA512
28716ddea580eeb23d93d1ff6ea0cf79a725e13c8f8a17ec9dfacb1fe29c7981ad84c03aed05663adc52365d63d19ec2f366762d1c685e3a9d93037570c3c583

Download Submit