ba43e793f372dac054027b6153c7b403180b222c7d5e1b622bbc12dab4ffdd05

Analysis

max time kernel
143s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12/02/2024, 03:23

Target

ba43e793f372dac054027b6153c7b403180b222c7d5e1b622bbc12dab4ffdd05.exe
Size

95KB
MD5

fdff3dab5f961f69ea39c4e508db2c11
SHA1

ad8f9b4430125939b11a5c7ee2091c3fe7f2583e
SHA256

ba43e793f372dac054027b6153c7b403180b222c7d5e1b622bbc12dab4ffdd05
SHA512

e0a0d2760d6ad30aa83cb0cc1192b626134a7c1e5f3f1bd88fa69b78cad8e7dd52c390cca2d4aefaa8c2c0be8c4e5788ba973b33dd8cf8c05713cbfc1e4383f0
SSDEEP

1536:TQNRwF/6HWFDw2ShOp0DiJkugWQrNQLAs98YfOtvzGpkxqFI+Pl06uFsKx:sNRCywDw1DiJkuJQraFOYGvs2fWl06aj

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1344	ba43e793f372dac054027b6153c7b403180b222c7d5e1b622bbc12dab4ffdd05.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\ba43e793f372dac054027b6153c7b403180b222c7d5e1b622bbc12dab4ffdd05.exe
"C:\Users\Admin\AppData\Local\Temp\ba43e793f372dac054027b6153c7b403180b222c7d5e1b622bbc12dab4ffdd05.exe"
1⤵
- Loads dropped DLL
PID:1344

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsf4632.tmp\nsDialogs.dll

Filesize
9KB

MD5
48f3e7860e1de2b4e63ec744a5e9582a

SHA1
420c64d802a637c75a53efc8f748e1aede3d6dc6

SHA256
6bf9cccd8a600f4d442efe201e8c07b49605ba35f49a4b3ab22fa2641748e156

SHA512
28716ddea580eeb23d93d1ff6ea0cf79a725e13c8f8a17ec9dfacb1fe29c7981ad84c03aed05663adc52365d63d19ec2f366762d1c685e3a9d93037570c3c583

Download Submit