Analysis

  • max time kernel
    94s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/02/2024, 21:46

General

  • Target

    SetupAuto.exe

  • Size

    512KB

  • MD5

    ff0198fd1f59b71c1deec34b6b0b0c07

  • SHA1

    cae622ad91a3bab0996589e3bf905c9d4eeb6059

  • SHA256

    f552d818f17841efb7f06803ecd2479fe5c9b2a0d3c4dad2c9d90b42e2e9d7d5

  • SHA512

    96795276eefcde81b0ad4ac85f4aaec368cb93bd9e9912c343316912f1502f3a22d845af3ba75ea5aa92b1936028558d48c11a77d331d49bd77f58b886868ccc

  • SSDEEP

    12288:Qnm2P17YuUAlhZk4ZN5lviET7MacVdekBCaeKOKEZQM7gM7ZQN:Qnh17YuUAlh+S5ZdT7sbekOKEZQM717M

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\SetupAuto.exe
    "C:\Users\Admin\AppData\Local\Temp\SetupAuto.exe"
    1⤵
    • Loads dropped DLL
    PID:3976

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\nsz3796.tmp\InstallOptions.dll

          Filesize

          14KB

          MD5

          325b008aec81e5aaa57096f05d4212b5

          SHA1

          27a2d89747a20305b6518438eff5b9f57f7df5c3

          SHA256

          c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

          SHA512

          18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

        • C:\Users\Admin\AppData\Local\Temp\nsz3796.tmp\ioSpecial.ini

          Filesize

          694B

          MD5

          2a457a7536ed7ee31c0f48514a6a24c4

          SHA1

          661be84acc95640b732424f6a2f0ef5a184bbebc

          SHA256

          ad623ee6b225f430da09be9c79fcb07587f340a9e6009a33af7fe20da6648acc

          SHA512

          ad9f0a3284ac8fa4cfee2fa93918b410d13d9fe95e79ece52c5aa24ca757a2b75c855f8c70acde9edba64608251926a0128c7dd060eaee9c4abf60807ea725bf