464598d1bf1ee4ac836f3314db4cee99af1afb7c832a14bff5040bc8721ca9d1

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 14:30

Target

25b44ab39a0958e1da244404d471ac8e.exe
Size

15.2MB
MD5

25b44ab39a0958e1da244404d471ac8e
SHA1

c7932da8987949a23260b847d450c7b0284aa58b
SHA256

464598d1bf1ee4ac836f3314db4cee99af1afb7c832a14bff5040bc8721ca9d1
SHA512

baf3e14c750070f352a9df7d1c042839746040f6a261d12b8a2643e15a4bf905d46c459c3957d94b69dd62e82dc8f7d97722f4d4f2b45716bdcf6790cdf97c4b
SSDEEP

393216:HGhAUOhKGKjLUv360eIuFwgd2nIf3fodYJhICKGpjKy:HNhZKj0q0eIvgUn8nXIn

Score

7^/10

Loads dropped DLL 4 IoCs

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\25b44ab39a0958e1da244404d471ac8e.exe
"C:\Users\Admin\AppData\Local\Temp\25b44ab39a0958e1da244404d471ac8e.exe"
1⤵
- Loads dropped DLL
PID:3508

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsp4539.tmp\System.dll

Filesize
10KB

MD5
7d85b1f619a3023cc693a88f040826d2

SHA1
09f5d32f8143e7e0d9270430708db1b9fc8871a8

SHA256
dc198967b0fb2bc7aaab0886a700c7f4d8cb346c4f9d48b9b220487b0dfe8a18

SHA512
5465804c56d6251bf369609e1b44207b717228a8ac36c7992470b9daf4a231256c0ce95e0b027c4164e62d9656742a56e2b51e9347c8b17ab51ff40f32928c85

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsp4539.tmp\System.dll

Filesize
3KB

MD5
d5a88cb8f5bb720a5caa432df444f20c

SHA1
305c7ddc8f6fb9c8fff178d6d646b9578f911c32

SHA256
3d158fc6b955dcc22b8508b4c953f948ae73d684a3ebe57233ba210ce1e94307

SHA512
cd4e64b8b1d9101565244dd893c385da495889c2cdad31b5370a1b59ce4e993e8a3d76f4e07dc1e9c19b3bf430412460b488c632508b66c57cc604b8924e758a

Download Submit