248a447d605ef36742625ebc628cc50c49c0bb3f9171aa1bf168a88d2c2af671

Analysis

max time kernel
122s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 04:03

Target

275f95d09e73b769d15252229d3fb53d.exe
Size

1.2MB
MD5

275f95d09e73b769d15252229d3fb53d
SHA1

d245190e6319d97cab5b2da61614a1a8a1610322
SHA256

248a447d605ef36742625ebc628cc50c49c0bb3f9171aa1bf168a88d2c2af671
SHA512

fe2e617460f4bcf5258cd916eaf723d05af61d0d2f4f0aff39f43224293bd26ba76632acf671c4571ac89d1dafc78939287951f1bf060caa6913157046ff9c49
SSDEEP

24576:ULI5wxkzjQeJEtE84CRwNyU+Ufi33vNRTnim0:ULIWxk/QbEwRwmUwqm0

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1956	275f95d09e73b769d15252229d3fb53d.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\275f95d09e73b769d15252229d3fb53d.exe
"C:\Users\Admin\AppData\Local\Temp\275f95d09e73b769d15252229d3fb53d.exe"
1⤵
- Loads dropped DLL
PID:1956

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsa4883.tmp\InstallOptions.dll

Filesize
14KB

MD5
0dc0cc7a6d9db685bf05a7e5f3ea4781

SHA1
5d8b6268eeec9d8d904bc9d988a4b588b392213f

SHA256
8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

SHA512
814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa4883.tmp\ioSpecial.ini

Filesize
734B

MD5
0e4f3ac82722220f720b7a8501204080

SHA1
e199ea8dea92f39595cb4ecacd262e8cb95d8c01

SHA256
4aae67c17f36a694c8912b1255eed957d64b3b2b5b1f4a4f4707c38e44a20f32

SHA512
33ca18b5411c5bc599737ecafc20793a649bf4052eb30fb0ecf4e3c61d0de2d42cc55efb80eb40220dc31f72e303cc45dd45da63d3479a5ce018ae6dc2f92531

Download Submit