f684eac93abb8bc8b84a8085642f6ff70206b69935f92be3c965f5f4d2ee5bd3

Analysis

max time kernel
130s
max time network
169s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
23-10-2023 00:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

HAULIN FULL SETUP.exe
Size

140.7MB
MD5

1cc09b28e4a69055453429e1deffa600
SHA1

a6919ce31f7883a3585d13f33edeab63271c41b1
SHA256

f684eac93abb8bc8b84a8085642f6ff70206b69935f92be3c965f5f4d2ee5bd3
SHA512

9ce751274357d77338706eb6288a2077dd6d95532ee25c73c152688bb671fea6a40c9782b21064a02af05e619ce267f53ad95e22c6be55b36ac3bb42f23e743a
SSDEEP

3145728:qliDaOOLfSH8fKR4rX8sXw4Q4YeDYXk8AD0EW48RFJBRRMjwvCCH1n9Anf2NghbS:XifhfKe8sXNJYeUo0EW46VQ5CHh9AnfS

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
1896	HAULIN FULL SETUP.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\HAULIN FULL SETUP.exe
"C:\Users\Admin\AppData\Local\Temp\HAULIN FULL SETUP.exe"
1⤵
- Loads dropped DLL
PID:1896

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsf7868.tmp\InstallOptions.dll

Filesize
12KB

MD5
d61d6c709e7947296603059f8bedeba9

SHA1
bdcfc90c358c82be43ef85727a7bdfebbd6d1b69

SHA256
65012a46603b7e13807938e2a61f3c2a60cced3fb3187dfab3e391705e2c3f63

SHA512
ed5a6efd1dd5e2119a9c523b9f9154e13552b3538bf72f4b8b02d6a9c808c3ae2ba7613d9e2b3395237461703f2da0a1482a52727ffcf6fc967552390dab0f2b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf7868.tmp\ioSpecial.ini

Filesize
724B

MD5
897f5c06308ae8cad5717217b1faa0ae

SHA1
3cb8409485146fceddea3f2a91ee1ee759935884

SHA256
d17ab39fb23615dac8d70b77181638757ce3fe01d348867c90aa90db452feffa

SHA512
40fd1e31637854548fb2525e383931b9a2b6e0a2a6e5d76d2a9f49422a96451734a9c4b58c06317f573bab5ecef96a68605d876582453c508f9055a5b68b6fb8

Download Submit