9d9b0cc07c62de48f6dada72a4edb68082b24bb5587e6e63ff8fe0dc7e718139

Analysis

max time kernel
136s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2023, 14:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9d9b0cc07c62de48f6dada72a4edb68082b24bb5587e6e63ff8fe0dc7e718139.exe
Size

70KB
MD5

a1f78e8ef363304076ffdd3e7f7b1d16
SHA1

73542461be733ac36915903d264bed3d8178295f
SHA256

9d9b0cc07c62de48f6dada72a4edb68082b24bb5587e6e63ff8fe0dc7e718139
SHA512

8733888525a2cbd7c729c5f4af3792a7eb0d11545cd6e0f80dd7fdeec63a03678854263c6a285589d9b7ccf9bcdcd76a7acc77ed99c0df4344da5bbd3292794f
SSDEEP

1536:OI0BJ1U34+QsKPlqmw3sSx2bPnjCwg0Ho0SGYsfGpjkKjk6:WKL0xw3sSx2bPnjCSHotVYGpAKjk6

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
348	9d9b0cc07c62de48f6dada72a4edb68082b24bb5587e6e63ff8fe0dc7e718139.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\9d9b0cc07c62de48f6dada72a4edb68082b24bb5587e6e63ff8fe0dc7e718139.exe
"C:\Users\Admin\AppData\Local\Temp\9d9b0cc07c62de48f6dada72a4edb68082b24bb5587e6e63ff8fe0dc7e718139.exe"
1⤵
- Loads dropped DLL
PID:348

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsaE08D.tmp\inetc.dll

Filesize
31KB

MD5
5da9df435ff20853a2c45026e7681cef

SHA1
39b1d70a7a03e7c791cb21a53d82fd949706a4b4

SHA256
9c52c74b8e115db0bde90f56382ebcc12aff05eb2232f80a4701e957e09635e2

SHA512
4ab3b1572485a8a11863adada2c6ec01e809a4b09f99d80903c79a95b91f299b8f2cd6cceaa915567e155a46291a33fb8ccb95141d76d4e7b0e040890d51d09f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsaE08D.tmp\inetc.dll

Filesize
31KB

MD5
5da9df435ff20853a2c45026e7681cef

SHA1
39b1d70a7a03e7c791cb21a53d82fd949706a4b4

SHA256
9c52c74b8e115db0bde90f56382ebcc12aff05eb2232f80a4701e957e09635e2

SHA512
4ab3b1572485a8a11863adada2c6ec01e809a4b09f99d80903c79a95b91f299b8f2cd6cceaa915567e155a46291a33fb8ccb95141d76d4e7b0e040890d51d09f

Download Submit