Analysis
- max time kernel
20s - max time network
114s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
30/12/2023, 22:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1e4e56d8718ded1668f40c6f156f9893.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1e4e56d8718ded1668f40c6f156f9893.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
- Target 1e4e56d8718ded1668f40c6f156f9893.exe
- Size 1.2MB
- Sample231230-19pr5abcej
- SHA256 5699604d46e7ee553090135f7afd09c03f5f4f4bfb45e3add02b503ff648824d
- MD5 1e4e56d8718ded1668f40c6f156f9893
- SHA1 746ac3d4a1e28c90090200ec19fc3fc6c9ff4d00
- SHA512 c5c790ac07fb39e6da0d1624b0b93646ee0b11e0ae5697e1729ed72ef6bbcf7d6afe87bcccb1f891434c04b7360b0844a86023105c8a93801add9f40eb8ee1de
- SSDEEP 6144:Ae34MvEq1zQbe9DP3lpr4jAxLY6M6EVagK4:JVzQcbRx9CVPN
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 7 IoCs
pid Process 220 1e4e56d8718ded1668f40c6f156f9893.exe 220 1e4e56d8718ded1668f40c6f156f9893.exe 220 1e4e56d8718ded1668f40c6f156f9893.exe 220 1e4e56d8718ded1668f40c6f156f9893.exe 220 1e4e56d8718ded1668f40c6f156f9893.exe 220 1e4e56d8718ded1668f40c6f156f9893.exe 220 1e4e56d8718ded1668f40c6f156f9893.exe -
resource yara_rule behavioral2/memory/220-23-0x0000000003260000-0x0000000003272000-memory.dmp upx - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsx4CAA.tmp\LangDLL.dll
- Size 5KB
- SHA256 60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
- MD5 9384f4007c492d4fa040924f31c00166
- SHA1 aba37faef30d7c445584c688a0b5638f5db31c7b
- SHA512 68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
- SSDEEP 48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
- MD5 SHA1 SHA512 SSDEEP