dc1e3dba8e4e1685ce07b97c1ba619d61909eb0d432a75a4d64530bc7f4b0abb

Analysis

max time kernel
141s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 16:32

Target

2d757c1b407ef66b2c278db7655b3ed8.exe
Size

223KB
MD5

2d757c1b407ef66b2c278db7655b3ed8
SHA1

9ec0900bf98202923193be4420831964c6db06d5
SHA256

dc1e3dba8e4e1685ce07b97c1ba619d61909eb0d432a75a4d64530bc7f4b0abb
SHA512

d21db0477900592851439414e545a9128e5b9ec3497575269237ee4d3aae9913522a8b7f88e68975956603a4eebda8be9baac22238ae342444fa290e44576cc9
SSDEEP

6144:HGiXr1kRhdSwYcWpjnIG3JYSiN/RPWkhYbH:35i3pbKzoNpR+H

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
3440	2d757c1b407ef66b2c278db7655b3ed8.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\2d757c1b407ef66b2c278db7655b3ed8.exe
"C:\Users\Admin\AppData\Local\Temp\2d757c1b407ef66b2c278db7655b3ed8.exe"
1⤵
- Loads dropped DLL
PID:3440

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsr3DC5.tmp\InstallOptions.dll

Filesize
14KB

MD5
fa5beae80dba254fb6c21b58265f5310

SHA1
f2f776611dbbb157b151aa744a7e0be1d4b8c079

SHA256
34b8a2130729064ca2f9b3b8e6f90d883d84662156b648a4eeccefefc3473269

SHA512
7c74b9e9f1ff0665ffd6fcf76fca462d9f4fbd7c4a215bc67b419497ef4c3cb9cede6c5b0803cabb316bc5391c4c6f0d578d36e1094b8ed326b140f8e272b538

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsr3DC5.tmp\ioSpecial.ini

Filesize
591B

MD5
4175f32a37fd90744ed92a9dda1a2689

SHA1
15ac9a2d5e4fc80ea4741d54e709a38c9aa9a3cb

SHA256
34699510b437df868c64ca13b1b87460c9a4ae61d2c39fbc47daaf0c15e2f107

SHA512
5d2a2a7c659bc304723c4eec22fc9c125e43ee8de6d918d3ce55b722d1509c93fbff44ba2c7b17f5b6edc40c6d79966a2e20c59df091ff0e7641f9236ea1d22f

Download Submit