159d7dd6ab7eb6e1b12d748c2bcf12f7178246b82e915a7945942d360be26b91

Analysis

max time kernel
0s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
07/01/2024, 00:16

Target

4788027c6f01a32389e206d85d70caae.exe
Size

275KB
MD5

4788027c6f01a32389e206d85d70caae
SHA1

835dcab5e3540b64ebb05e5f7be2d80a1cad9818
SHA256

159d7dd6ab7eb6e1b12d748c2bcf12f7178246b82e915a7945942d360be26b91
SHA512

9737e81aee5fec9c86ca98a1ff76e2b4cd1b666927999710bcca1be3963abf60771cfbbe6acbeb0cbd275bc21f935070c31b9c11e3aa3007988a535d8c393456
SSDEEP

6144:rQqP1B2vcjtq1ucJQM1ZoNbiti0eSkMQ2/nd7iti0y:p1YEpFcBzj4Jx2/dM4

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
3788	4788027c6f01a32389e206d85d70caae.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 12 IoCs

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsn8156.tmp\System.dll

Filesize
11KB

MD5
c17103ae9072a06da581dec998343fc1

SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsn8156.tmp\inetc3.dll

Filesize
25KB

MD5
9d8ce05f532dc7b5742831ec8a63c2d8

SHA1
b014365f723c78a84bcdf8a46cfa016eb2b8dbc5

SHA256
fcc46c2e60931a76fe529a9fa5a85ba2f4bf7907d651161f92fc524ac4747982

SHA512
98f268bebf0c82d019873a7b109e1822011c0532e6a6d8ba94d2b8a918d9558f4db89100b6ee357c9c510ff56adc349e619489fd7e8d21e7f826877185ede3fe

Download Submit