e1cf576673a697d06b0464c5d8f1057033ab6b221bc13828f79a2eeca6e763c2

Analysis

max time kernel
91s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
24-12-2023 22:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

168948561890a7fa70f4fc0f198e4c6e.exe
Size

1.4MB
MD5

168948561890a7fa70f4fc0f198e4c6e
SHA1

3de90f8ffd0018483259048a4912e428b81aaa69
SHA256

e1cf576673a697d06b0464c5d8f1057033ab6b221bc13828f79a2eeca6e763c2
SHA512

728940235ebf1c0c6069c333f1517427623406e2c3ca01a7d321c3152897c4f2844a691954666002527289aede082e228c834d1e9017026e6cb4e3b622b33aa3
SSDEEP

24576:0u41rt0xyp5SriBgqA7ijE7zW6mmSQl6HBBpZw+ufkGNWsBAZxRX2D2:YYxypcriSqpEfWyl+28cIRXp

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2252	168948561890a7fa70f4fc0f198e4c6e.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\168948561890a7fa70f4fc0f198e4c6e.exe
"C:\Users\Admin\AppData\Local\Temp\168948561890a7fa70f4fc0f198e4c6e.exe"
1⤵
- Loads dropped DLL
PID:2252

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\ci0-temp\install.bmp

Filesize
9KB

MD5
1463a5f9de903c9b0cdbc28920414b7f

SHA1
4a64da9fcdc2ef0588ec6c5d2a1e43e670b08648

SHA256
dca76d020730f2dff4852dd661880819753a074c50497536b9a4b6ffe8ea00c2

SHA512
ab65c14fab907d2536e9d4cc35fa88149d07304cc08dbc261fce055d953fa7d4fb8f62690a80bb9edfcc34f6ba7f540035c999a746ddce5f93ba0680159d7a21

Download Submit
C:\Users\Admin\AppData\Local\Temp\gert0.dll

Filesize
48KB

MD5
369e41aebc74fd34c20e3c084156b5a6

SHA1
3167a9ea87615b277b9150f15bfeb20990333bf3

SHA256
566ce78abfde5aa50ce76ef72c2dadae7f7280674a3ea96ddc59ba05c51f03bd

SHA512
e5e12dc03807f8faadbe5eb3ecbb1fb78277b537590d07bd81ce41f8c79bd14527833cfbbf00d2b07eb95a3b175778a2db41744b306a5ccd76ec793987a36bd0

Download Submit