Analysis

  • max time kernel
    20s
  • max time network
    114s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 22:21

General

  • Target
    1e4e56d8718ded1668f40c6f156f9893.exe
  • Size 1.2MB
  • Sample231230-19pr5abcej
  • SHA256 5699604d46e7ee553090135f7afd09c03f5f4f4bfb45e3add02b503ff648824d
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 7 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\1e4e56d8718ded1668f40c6f156f9893.exe
    "C:\Users\Admin\AppData\Local\Temp\1e4e56d8718ded1668f40c6f156f9893.exe"
    1⤵
    • Loads dropped DLL
    PID:220

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LangDLL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsx4CAA.tmp\LangDLL.dll
        • Size 5KB
        • SHA256 60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
        • MD5 SHA1 SHA512 SSDEEP

        memory/220-24-0x0000000003260000-0x0000000003272000-memory.dmp

        memory/220-23-0x0000000003260000-0x0000000003272000-memory.dmp

        memory/220-48-0x0000000003260000-0x0000000003272000-memory.dmp

        memory/220-47-0x0000000003260000-0x0000000003272000-memory.dmp