074e3ffd30b58cb5a3bf92776fe89ddf82a5e48cf1aa6bbf43a9790b3df1b5a3

Analysis

max time kernel
93s
max time network
112s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
18/02/2024, 16:23

Target

AnimazeLauncherInstaller.exe
Size

181.1MB
MD5

95d8bb8ded5a7a7f50ff852130a57253
SHA1

ee27bc8556e49fb8956c9316d73f5143f61b381e
SHA256

074e3ffd30b58cb5a3bf92776fe89ddf82a5e48cf1aa6bbf43a9790b3df1b5a3
SHA512

39cf0976ecf14fb129da67974931db0f8d54f044d19dec75262ba9ee4d8481c8b5efa290001a145d199478c84b13419ae8ef73763ca06ccc15fa59fc3999e23e
SSDEEP

3145728:1fLC0Ie41YiW5wwd2Ejo7USpb5S9QM+7RUx6TwKXhTyrLoAFuvyAyGnCTFb/32al:J+t1YiW5wwd2qo7USO+7R0+X0Loq7enE

Score

4^/10

Loads dropped DLL 1 IoCs

pid	Process
796	AnimazeLauncherInstaller.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\AnimazeLauncherInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\AnimazeLauncherInstaller.exe"
1⤵
- Loads dropped DLL
PID:796

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsx590E.tmp\UserInfo.dll

Filesize
4KB

MD5
2f69afa9d17a5245ec9b5bb03d56f63c

SHA1
e0a133222136b3d4783e965513a690c23826aec9

SHA256
e54989d2b83e7282d0bec56b098635146aab5d5a283f1f89486816851ef885a0

SHA512
bfd4af50e41ebc56e30355c722c2a55540a5bbddb68f1522ef7aabfe4f5f2a20e87fa9677ee3cdb3c0bf5bd3988b89d1224d32c9f23342a16e46c542d8dc0926

Download Submit