Analysis

  • max time kernel
    141s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 00:20

General

  • Target
    45f02bd0b9892026e367c5fd0573d61d.exe
  • Size 495KB
  • Sample231226-am3glachdl
  • SHA256 37b3b70f78e08862b3e10c801c0b801afcc39664553c59d5ddbc0dd25704ffa1
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\45f02bd0b9892026e367c5fd0573d61d.exe
    "C:\Users\Admin\AppData\Local\Temp\45f02bd0b9892026e367c5fd0573d61d.exe"
    1⤵
    • Loads dropped DLL
    PID:3384

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        BrandingURL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq7C45.tmp\BrandingURL.dll
        • Size 4KB
        • SHA256 bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e
        • MD5 SHA1 SHA512

        InstallOptions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq7C45.tmp\InstallOptions.dll
        • Size 14KB
        • SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
        • MD5 SHA1 SHA512 SSDEEP

        LangDLL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq7C45.tmp\LangDLL.dll
        • Size 5KB
        • SHA256 60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
        • MD5 SHA1 SHA512 SSDEEP

        NSISdl.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq7C45.tmp\NSISdl.dll
        • Size 14KB
        • SHA256 dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
        • MD5 SHA1 SHA512 SSDEEP

        ioSpecial.ini

        • Path C:\Users\Admin\AppData\Local\Temp\nsq7C45.tmp\ioSpecial.ini
        • Size 1KB
        • SHA256 6b7411fd7c959554f0909150ea54e1263a02090369b6680e3b553f52a23aa80d
        • MD5 SHA1 SHA512