Analysis
- max time kernel
142s - max time network
106s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system - submitted
31/12/2023, 01:51
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
23680d80fd79ad06361ac178244b581a.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
23680d80fd79ad06361ac178244b581a.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
- Target 23680d80fd79ad06361ac178244b581a.exe
- Size 226KB
- Sample231231-b9y85abdb5
- SHA256 20bacd43b0ebf403cb88716b340646917abe28cb358ccffeb7877075107e3737
- MD5 23680d80fd79ad06361ac178244b581a
- SHA1 647fe308827ce5e68e61cf632ce51bbf3e28677e
- SHA512 f880da107af87327bc2163add144671084dbf6b4311984541c6581aac411ceb921ae3d619a61a6a5588e5fd17ba4d51b7e7820b994f17352862593f58023839c
- SSDEEP 3072:dQIURTXJrIHVY2BNjcjcLJmC2IvDK1FrWYyt:dsuVYe3df2I+1FrWtt
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 7 IoCs
pid Process 4272 23680d80fd79ad06361ac178244b581a.exe 4272 23680d80fd79ad06361ac178244b581a.exe 4272 23680d80fd79ad06361ac178244b581a.exe 4272 23680d80fd79ad06361ac178244b581a.exe 4272 23680d80fd79ad06361ac178244b581a.exe 4272 23680d80fd79ad06361ac178244b581a.exe 4272 23680d80fd79ad06361ac178244b581a.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsj517D.tmp\System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nsj517D.tmp\UserInfo.dll
- Size 4KB
- SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
- MD5 7579ade7ae1747a31960a228ce02e666
- SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
- SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nsj517D.tmp\inetca.dll
- Size 20KB
- SHA256 45153adf50541316468e2b189a0f8127be9fb29e2f920e7eeaa6aceb438db8c4
- MD5 134b93f8bd1f82cd2f1b06c878580703
- SHA1 29cdbce7a2caf1f7e4d2a139c42336d490074665
- SHA512 f970c38debb6631dab7369e2bc96237f16a8fd328d9d35a2b54cb688e1807f62cc6d63230afe89ce5c3945097ae4466872c72929a9623adde3ee57bddf54b692
- SSDEEP 384:EBQCxl9oGPZsw1v6yBIgktbBYeTeXMK5HQ/0lR+Tya4LV0Ac9khYLMkIX0+GBxgU:goGFghBZTeXMK6cVa4L
- MD5 SHA1 SHA512 SSDEEP