ba43e793f372dac054027b6153c7b403180b222c7d5e1b622bbc12dab4ffdd05

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12-02-2024 03:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ba43e793f372dac054027b6153c7b403180b222c7d5e1b622bbc12dab4ffdd05.exe
Size

95KB
MD5

fdff3dab5f961f69ea39c4e508db2c11
SHA1

ad8f9b4430125939b11a5c7ee2091c3fe7f2583e
SHA256

ba43e793f372dac054027b6153c7b403180b222c7d5e1b622bbc12dab4ffdd05
SHA512

e0a0d2760d6ad30aa83cb0cc1192b626134a7c1e5f3f1bd88fa69b78cad8e7dd52c390cca2d4aefaa8c2c0be8c4e5788ba973b33dd8cf8c05713cbfc1e4383f0
SSDEEP

1536:TQNRwF/6HWFDw2ShOp0DiJkugWQrNQLAs98YfOtvzGpkxqFI+Pl06uFsKx:sNRCywDw1DiJkuJQraFOYGvs2fWl06aj

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2444	ba43e793f372dac054027b6153c7b403180b222c7d5e1b622bbc12dab4ffdd05.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2444	ba43e793f372dac054027b6153c7b403180b222c7d5e1b622bbc12dab4ffdd05.exe

C:\Users\Admin\AppData\Local\Temp\ba43e793f372dac054027b6153c7b403180b222c7d5e1b622bbc12dab4ffdd05.exe
"C:\Users\Admin\AppData\Local\Temp\ba43e793f372dac054027b6153c7b403180b222c7d5e1b622bbc12dab4ffdd05.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
PID:2444

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\Temp\nsd1324.tmp\nsDialogs.dll

Filesize
9KB

MD5
48f3e7860e1de2b4e63ec744a5e9582a

SHA1
420c64d802a637c75a53efc8f748e1aede3d6dc6

SHA256
6bf9cccd8a600f4d442efe201e8c07b49605ba35f49a4b3ab22fa2641748e156

SHA512
28716ddea580eeb23d93d1ff6ea0cf79a725e13c8f8a17ec9dfacb1fe29c7981ad84c03aed05663adc52365d63d19ec2f366762d1c685e3a9d93037570c3c583

Download Submit