8c5d725d87d7a6c8519bce9282b06f52395e4f945be28f1d1981c0dc4c6458a3

Analysis

max time kernel
146s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
23-09-2023 05:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

OpenCodecSetup64.exe
Size

10.3MB
MD5

769b125be4ea218efb8aee061913f84f
SHA1

0d8cc87f5ff70e8f460c25e5f4980cebbc4512d7
SHA256

8c5d725d87d7a6c8519bce9282b06f52395e4f945be28f1d1981c0dc4c6458a3
SHA512

12514b799ea08422f298f344355ce7876f306938d4b5760b691f81abc4dc297ac6066ef11c0f2ef4ccb91ae2296440daf07d67f38d59220557541a7521c19f9d
SSDEEP

196608:MYUvf+5vKkZxuhHnJnD/QpF4gWEOYU+4FbsotoMUjZJOrRFNy:eSvK8uh1D/1gWEOMkbs5MUjXOlm

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
4700	OpenCodecSetup64.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\OpenCodecSetup64.exe
"C:\Users\Admin\AppData\Local\Temp\OpenCodecSetup64.exe"
1⤵
- Loads dropped DLL
PID:4700

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsg7CF2.tmp\System.dll

Filesize
11KB

MD5
55a26d7800446f1373056064c64c3ce8

SHA1
80256857e9a0a9c8897923b717f3435295a76002

SHA256
904fd5481d72f4e03b01a455f848dedd095d0fb17e33608e0d849f5196fb6ff8

SHA512
04b8ab7a85c26f188c0a06f524488d6f2ac2884bf107c860c82e94ae12c3859f825133d78338fd2b594dfc48f7dc9888ae76fee786c6252a5c77c88755128a5b

Download Submit