Analysis

  • max time kernel
    119s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/11/2023, 11:22

General

  • Target

    setup_NSIS_XiMoL_Contrib-v1.0.0.exe

  • Size

    900KB

  • MD5

    e3d2049bdc92af8f14908bfb64499640

  • SHA1

    376921e4b0eda82f9352b9ce8cb6ba120ebda3d8

  • SHA256

    9e58c6af08806e14173c806987899826937e6b9e0a1a36bfb056170c3fc61105

  • SHA512

    9d172ce815780ec9dccb7151f6193602a75e7d8dc202f08284f3fec8070a98c3f123052d997f71eeb9835189c3cec22c75fd11e77ff3b7f8c30af69884ce8402

  • SSDEEP

    24576:M3KToACLxMNDFPPGnVjPCKRHNW1bn9g8JRtF:fTovxM19+xT2bnxJ1

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup_NSIS_XiMoL_Contrib-v1.0.0.exe
    "C:\Users\Admin\AppData\Local\Temp\setup_NSIS_XiMoL_Contrib-v1.0.0.exe"
    1⤵
    • Loads dropped DLL
    PID:4948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsg21AD.tmp\InstallOptions.dll

    Filesize

    12KB

    MD5

    57db62366ef11fdc47922a02031f0492

    SHA1

    6d30db5285b653025f94e74b9b045870dc0aeb7a

    SHA256

    2338752092918db8e068d55bea61f8cdeb9be37b6e6d30a730d9703b169b08b4

    SHA512

    d0257e02370863e07feb9346b88d87a102089f0c48aea13e069e55a14f0f6db51fb3d5f41ed5d2f39e36b612f4b6194a6b7c059709808bfb23ded89d0b0a3db5

  • C:\Users\Admin\AppData\Local\Temp\nsg21AD.tmp\ioSpecial.ini

    Filesize

    721B

    MD5

    312b78fc4e4b5f63edbb7a5631690f2b

    SHA1

    494f4890a9752077e26b51ffe30f3be1250fc653

    SHA256

    7e347af5e9d489d0a941a13934ee5b06a4ee0c417d612733826cb1f091186728

    SHA512

    112cf0a9a605949920397199dacb30e849b56d6caf2c972e1a5da7a5102302379834f204448a97bc79c665e347b7e86f1112a9329afc0fe26946c50628a82044