ee1903579ab5398815057fcdd1765ea73fbaad57be5e461a274737737a4aa201

Analysis

max time kernel
156s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 22:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

05177a86aaed0ec890f39844407a2b14.exe
Size

1.2MB
MD5

05177a86aaed0ec890f39844407a2b14
SHA1

ac346360c19e0d8e527626548305fc88db45423a
SHA256

ee1903579ab5398815057fcdd1765ea73fbaad57be5e461a274737737a4aa201
SHA512

61b4a43e63b19ebce63ee016555d54ca39e41f6aaab6c5f0d25759748d9a4a7c08c941e4ee6cd6f85f10c05d3de814434f75ae99d0ae2838e5a65b14942b1794
SSDEEP

24576:97JLd/c+eKzcP7qeirgwMMqkaQRo55p8vcSQoRCeZXyyHeZ7dYxM2CRKS:NJhcjKzcP7qRZMMqPmo72v1RCeFyf/bZ

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 11 IoCs

pid	Process
4880	05177a86aaed0ec890f39844407a2b14.exe
4880	05177a86aaed0ec890f39844407a2b14.exe
4880	05177a86aaed0ec890f39844407a2b14.exe
4880	05177a86aaed0ec890f39844407a2b14.exe
4880	05177a86aaed0ec890f39844407a2b14.exe
4880	05177a86aaed0ec890f39844407a2b14.exe
4880	05177a86aaed0ec890f39844407a2b14.exe
4880	05177a86aaed0ec890f39844407a2b14.exe
4880	05177a86aaed0ec890f39844407a2b14.exe
4880	05177a86aaed0ec890f39844407a2b14.exe
4880	05177a86aaed0ec890f39844407a2b14.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\05177a86aaed0ec890f39844407a2b14.exe
"C:\Users\Admin\AppData\Local\Temp\05177a86aaed0ec890f39844407a2b14.exe"
1⤵
- Loads dropped DLL
PID:4880

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsh55FD.tmp\System.dll

Filesize
10KB

MD5
82f7926fd7d12e3eb8ed7b5232bcf956

SHA1
6065fc921b742cc86c77ce2533fc1d17359eb45e

SHA256
604b5e75f43ffae8f172018cdd8f136392d9c52ae0c100d27ef537bb2dfb3984

SHA512
b31a63ebbda8f147c32d8336c5ecde8c5261ad5526b01926d7cd74b7a9a1348da56e180e53d20e1e300daca76f9511f24d6e695550b705b7650c239e5b6e76c7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsh55FD.tmp\nsDialogs.dll

Filesize
8KB

MD5
f42b19bd20c82eabcfe14273499e7664

SHA1
99310fe91a2e2fbe720761b5625e1f83afeee0db

SHA256
c99f30f5e2dfd948b7da2219bc5a0a73836a70e2486272b42c3ca45710b0316a

SHA512
c6867ee68b3099a9b03aba7367ed6e55576f874eccab71fbebbc9c3cb01f20e616615e8080c2a379b7e7da1abe6cd776f862f8c9ad4dce38d2fa79b48fa38e49

Download Submit