f23248fa3906336ed4f2818f26e4d101d3dc032fcbad27ed0f959c8d9304b798

Analysis

max time kernel
158s
max time network
176s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2023, 22:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f23248fa3906336ed4f2818f26e4d101d3dc032fcbad27ed0f959c8d9304b798.exe
Size

70KB
MD5

165b63cde4a45de66772cf557cf5a7d5
SHA1

8bf6b8faece6086ccaf7be3b0c95f6f6e6b0ddd9
SHA256

f23248fa3906336ed4f2818f26e4d101d3dc032fcbad27ed0f959c8d9304b798
SHA512

9816ddf084fe0efc097b512b50cf9df1625f084fbda3b97309b834a038867d88f59dc594987fffd92d8ac5d728c247bab0aa791d97693b051365fdc6c82ad828
SSDEEP

1536:OI0BJ1U34+QsKPlqmw3sSx2bPnjCwg0d0SGYsfGpjkKjkM:WKL0xw3sSx2bPnjCSdtVYGpAKjkM

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
3192	f23248fa3906336ed4f2818f26e4d101d3dc032fcbad27ed0f959c8d9304b798.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\f23248fa3906336ed4f2818f26e4d101d3dc032fcbad27ed0f959c8d9304b798.exe
"C:\Users\Admin\AppData\Local\Temp\f23248fa3906336ed4f2818f26e4d101d3dc032fcbad27ed0f959c8d9304b798.exe"
1⤵
- Loads dropped DLL
PID:3192

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nst3506.tmp\inetc.dll

Filesize
31KB

MD5
5da9df435ff20853a2c45026e7681cef

SHA1
39b1d70a7a03e7c791cb21a53d82fd949706a4b4

SHA256
9c52c74b8e115db0bde90f56382ebcc12aff05eb2232f80a4701e957e09635e2

SHA512
4ab3b1572485a8a11863adada2c6ec01e809a4b09f99d80903c79a95b91f299b8f2cd6cceaa915567e155a46291a33fb8ccb95141d76d4e7b0e040890d51d09f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst3506.tmp\inetc.dll

Filesize
31KB

MD5
5da9df435ff20853a2c45026e7681cef

SHA1
39b1d70a7a03e7c791cb21a53d82fd949706a4b4

SHA256
9c52c74b8e115db0bde90f56382ebcc12aff05eb2232f80a4701e957e09635e2

SHA512
4ab3b1572485a8a11863adada2c6ec01e809a4b09f99d80903c79a95b91f299b8f2cd6cceaa915567e155a46291a33fb8ccb95141d76d4e7b0e040890d51d09f

Download Submit