Analysis

  • max time kernel
    128s
  • max time network
    173s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/01/2024, 03:34

General

  • Target
    SecuriteInfo.com.FileRepPup.18058.13095.exe
  • Size 293KB
  • Sample240122-d4rm7sfdgm
  • SHA256 9c44660a837beaed12beb9cb626ee2886910adefe044f269240a1e2db1ee6dbf
  • MD5 SHA1 SHA512 SSDEEP
Score
4/10

Malware Config

Signatures

  • Loads dropped DLL 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.FileRepPup.18058.13095.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.FileRepPup.18058.13095.exe"
    1⤵
    • Loads dropped DLL
    PID:4276

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        sf-helper-default-installer.log

        • Path C:\Users\Admin\AppData\Local\Programs\AppHelper\Tools\sf-helper-default\sf-helper-default-installer.log
        • Size 604B
        • SHA256 c39f210fcbde91727fdc8cc87b004b2fa4580d430e61dbb55b08f6961bb4af6b
        • MD5 SHA1 SHA512

        sf-helper-default-uninstaller.ini

        • Path C:\Users\Admin\AppData\Local\Programs\AppHelper\Tools\sf-helper-default\sf-helper-default-uninstaller.ini
        • Size 273B
        • SHA256 ed2051f60699f05532d90fdcedd6f497fb62742927f8a7360984dc9ff121b01d
        • MD5 SHA1 SHA512

        INetC.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu846E.tmp\INetC.dll
        • Size 25KB
        • SHA256 85e03805f90f72257dd41bfdaa186237218bbb0ec410ad3b6576a88ea11dccb9
        • MD5 SHA1 SHA512 SSDEEP

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu846E.tmp\System.dll
        • Size 12KB
        • SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
        • MD5 SHA1 SHA512 SSDEEP