d19739d0e8ab83031e49a40701a99ac16abe3113a0bb53cff42bd5286a845627

Analysis

max time kernel
93s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
29/01/2024, 17:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

806d9fd741f617eccb4629b145e58f16.exe
Size

5.2MB
MD5

806d9fd741f617eccb4629b145e58f16
SHA1

eb0a3e5afdbc83e6bacf441470d572efaef5f26e
SHA256

d19739d0e8ab83031e49a40701a99ac16abe3113a0bb53cff42bd5286a845627
SHA512

8944f9cbf8942cfe3a9d07fd56f010cc4c953057d870283c5cbec66a0dcaf162fee6323d2e90c5a158c18656b7693982832b8e8ca598d181430b2a96ea03ac47
SSDEEP

98304:gxlbhtH0ZuM+1FzQCiGAnEEua4Gie0G1N89gb18ajkig/pA5RYs3DuhaId858M2E:c5YuMsUXGAnRQGwG1NAgZ8aQXsRN3KMj

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
1456	806d9fd741f617eccb4629b145e58f16.exe
1456	806d9fd741f617eccb4629b145e58f16.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\806d9fd741f617eccb4629b145e58f16.exe
"C:\Users\Admin\AppData\Local\Temp\806d9fd741f617eccb4629b145e58f16.exe"
1⤵
- Loads dropped DLL
PID:1456

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\2EA39687\_Setup.dll

Filesize
361KB

MD5
c4c179a19b52c99cba3aac78d937ec77

SHA1
142631629cee10a1b83c5e67157e176d8b2ede8a

SHA256
82a9dacb3de14f51aac79b8423983bececf6b5300c88aa9652bc3c7db53a491e

SHA512
9b469b60caa55b7e3600100150511197f80ff12a64b6ed57d372156abf942ee482e49ddffe3cf8ee34678fe4fef3d510b6344e6fe650305ca16d07e79dced1a9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tsu-05B0.dll

Filesize
266KB

MD5
1c621f6a52f814921b9b42156b63f8c9

SHA1
6f0f75cf627075eee134f9a9ccfee26203800cee

SHA256
44c4e0d5b3686153c7647087a61972a010ba7e19b61cdabe801b1004778b9c36

SHA512
60425d4ce7f8b57bb3701c3f883b8a18e7cedfac723d5fb13d1aa6624057981555d8812ab50a785138d4fc0312f1da8f516b658c0230b32b211eedc2c754ac16

Download Submit