ee1903579ab5398815057fcdd1765ea73fbaad57be5e461a274737737a4aa201

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29-12-2023 22:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

05177a86aaed0ec890f39844407a2b14.exe
Size

1.2MB
MD5

05177a86aaed0ec890f39844407a2b14
SHA1

ac346360c19e0d8e527626548305fc88db45423a
SHA256

ee1903579ab5398815057fcdd1765ea73fbaad57be5e461a274737737a4aa201
SHA512

61b4a43e63b19ebce63ee016555d54ca39e41f6aaab6c5f0d25759748d9a4a7c08c941e4ee6cd6f85f10c05d3de814434f75ae99d0ae2838e5a65b14942b1794
SSDEEP

24576:97JLd/c+eKzcP7qeirgwMMqkaQRo55p8vcSQoRCeZXyyHeZ7dYxM2CRKS:NJhcjKzcP7qRZMMqPmo72v1RCeFyf/bZ

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 6 IoCs

pid	Process
2500	05177a86aaed0ec890f39844407a2b14.exe
2500	05177a86aaed0ec890f39844407a2b14.exe
2500	05177a86aaed0ec890f39844407a2b14.exe
2500	05177a86aaed0ec890f39844407a2b14.exe
2500	05177a86aaed0ec890f39844407a2b14.exe
2500	05177a86aaed0ec890f39844407a2b14.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2500	05177a86aaed0ec890f39844407a2b14.exe

C:\Users\Admin\AppData\Local\Temp\05177a86aaed0ec890f39844407a2b14.exe
"C:\Users\Admin\AppData\Local\Temp\05177a86aaed0ec890f39844407a2b14.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
PID:2500

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\Temp\nsoB2A.tmp\nsDialogs.dll

Filesize
8KB

MD5
f42b19bd20c82eabcfe14273499e7664

SHA1
99310fe91a2e2fbe720761b5625e1f83afeee0db

SHA256
c99f30f5e2dfd948b7da2219bc5a0a73836a70e2486272b42c3ca45710b0316a

SHA512
c6867ee68b3099a9b03aba7367ed6e55576f874eccab71fbebbc9c3cb01f20e616615e8080c2a379b7e7da1abe6cd776f862f8c9ad4dce38d2fa79b48fa38e49

Download Submit