04fafb4515532c6a91a0d0955b54c8fcf2e6ddd043f14545749fc6d50f799645

Analysis

max time kernel
141s
max time network
121s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
26/01/2024, 17:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SecuriteInfo.com.Win32.MalOb-IJ.15224.8341.exe
Size 13.1MB
Sample240126-v65raacdcp
SHA256 04fafb4515532c6a91a0d0955b54c8fcf2e6ddd043f14545749fc6d50f799645
MD5 514220922afdc657e37e9ac8932bc913
SHA1 1809b5941752b0ba9ea05c92a5e2683738821572
SHA512 f2ec938eceee26ceb8723aabdeef7a6346bce0603fb616e157bf0a45b5894b30aed6d1dd7a2d88c9b031a9b75cfde3bc097c5477ed1b5a53ae06c8f592cec839
SSDEEP 196608:fiESuPjAgt5RXZmbsx64Ady6HqeyjLs6a4JdMpItG1XX7NHKYL:6s8g5pR46njLsb4dG1XrTL
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 5 IoCs

pid	Process
1624	SecuriteInfo.com.Win32.MalOb-IJ.15224.8341.exe
1624	SecuriteInfo.com.Win32.MalOb-IJ.15224.8341.exe
1624	SecuriteInfo.com.Win32.MalOb-IJ.15224.8341.exe
1624	SecuriteInfo.com.Win32.MalOb-IJ.15224.8341.exe
1624	SecuriteInfo.com.Win32.MalOb-IJ.15224.8341.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.MalOb-IJ.15224.8341.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.MalOb-IJ.15224.8341.exe"
1⤵
- Loads dropped DLL
PID:1624

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nst4334.tmp\InstallOptions.dll
Size 32KB
SHA256 e8139011bb64955e4f848d382748ca1ce3cd53d03dae026c4214e591883b0cd9
MD5 525daa8242978c3eb44f452a090b2de9
SHA1 dc73c393f4290c6a9d0b14c9fd8f19e26a3da056
SHA512 1be1ace4464a89d478fdf744f3df69387dd978c916de8866635673f7d15934a5bf709a8a0b707af7282e02841c16f0f1f7d7f78174a7c9a274f2ab7cff481b5c
SSDEEP 384:yMngq4KteJM6jwzkh0eoWWXryzSIc/UCQX08tk6tztN4YkvZMC3bHSDyx14hn+g+:yAg/Km049+Mnt3NfgvVXmhppFlPq
MD5 SHA1 SHA512 SSDEEP

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\nst4334.tmp\UserInfo.dll
Size 7KB
SHA256 dffc672e031942dee96f211f17f408292d1d2cd539280f809f1629359385ae7d
MD5 e445d242ae948a65957dac52833d3709
SHA1 4a7f2777eadc9c062ee5adbb3fea44bef4b47372
SHA512 e438ac672235a8604026d658e67971b333774ac3c4a0658e7352acd6027de7be5ecdb9774fb0f50ea371cbf908d1fc9ad6f6c43e74b7d80803e030e48d8c65b5
SSDEEP 96:k4oHQOyTsHeXgpVGuRkNB/RX7JFazrvqeR66:jge/Ykv/RrDafqe
MD5 SHA1 SHA512 SSDEEP

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nst4334.tmp\ioSpecial.ini
Size 1KB
SHA256 8496296cddf4fdedbb21feb188a052313f8ec21f87fba1d4f2f84d6515099b5c
MD5 7e17f859a6570e9233b18fae7dce27be
SHA1 6c2de383cf8ca7d4a2130f135945043e4a4de83a
SHA512 3b242928d811e5cba7a0eb170cb1d4f33946fcd20e2acb9d075bfd5c129f4875dbbd1dbbfd676b983e1a0ee8da16628dee4d1cd0cd0f3b16ae6dc512e4f8c838
MD5 SHA1 SHA512

Submit Download

memory/1624-94-0x0000000000400000-0x00000000005B2000-memory.dmp

Download

memory/1624-95-0x0000000073E20000-0x0000000073E34000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads