e057e8de00033926c2e2e42db11f0d3fb39f06a84c6a4438ad4cad08439aa0a7

Analysis

max time kernel
196s
max time network
206s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
02-01-2024 00:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3e3a58524e01ac2b5284c88bac1b8908.exe
Size

117KB
MD5

3e3a58524e01ac2b5284c88bac1b8908
SHA1

55dbe0d94dc4e82aa5dc206b7671f9312e07fc39
SHA256

e057e8de00033926c2e2e42db11f0d3fb39f06a84c6a4438ad4cad08439aa0a7
SHA512

115c21f1da6e63bcd317b2611d71da41e0300890a291e97ac91f1e1afce46df94e0a16f2413322db0819ae0f7f671550459c82ddbd3fd84683a991807ea632ba
SSDEEP

1536:kYTmwVUsW7dtJMHy0DxmJj4Romu/lfr79y05RKDG3wDfG+bU1PpoByARD0GsoCZh:HS17XJiDxmJj452A08S2dg1Cjdb3vQ

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
2132	3e3a58524e01ac2b5284c88bac1b8908.exe
2132	3e3a58524e01ac2b5284c88bac1b8908.exe
2132	3e3a58524e01ac2b5284c88bac1b8908.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\3e3a58524e01ac2b5284c88bac1b8908.exe
"C:\Users\Admin\AppData\Local\Temp\3e3a58524e01ac2b5284c88bac1b8908.exe"
1⤵
- Loads dropped DLL
PID:2132

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsj347A.tmp\NSISdl.dll

Filesize
37KB

MD5
ab3f88124e6a470b5c6f5730b6e54cd3

SHA1
68a0cce70c060d262e0e1bb33e959e10e937ac8f

SHA256
1aaeb335136cfe7011c3a1122fa1339e0fd94263be18b2d61917c85ad5497e69

SHA512
3857d26f9ec79a4c5a544fb8bffe8613f29e1ed5983a8b018ff8c757adee8a944eec5092560cd72d5d99366dc7fd7d2aa197ee3249f6542c433028befb9d3acc

Download Submit
memory/2132-9-0x0000000070C00000-0x0000000070C19000-memory.dmp

Filesize
100KB

Download
memory/2132-10-0x00000000748D0000-0x00000000748E6000-memory.dmp

Filesize
88KB

Download