756e9f397d503a182518366139f96f338b1e783d9faabca95a399c75eb257edc

Analysis

max time kernel
92s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
22/02/2024, 22:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ausweichspiel.exe
Size 16.6MB
Sample240222-2avprsgc46
SHA256 756e9f397d503a182518366139f96f338b1e783d9faabca95a399c75eb257edc
MD5 c9e580a34f98310722a475b37628fbfa
SHA1 1603a0cc1c18d268dc7e633df1c39046a3be7cbd
SHA512 f5a2aef83b75c8c2759043db86b3eb7041097c0083fe59860f3e15adce55e435955d32e4ee74e5018d44c99efea0578ecefbef9fb8bfc82d63a77421fe0247d7
SSDEEP 393216:4Mm202e5O8LaAlQr4tP1LDba7AS7ITej9AWdNK/CjondDV421okvhhBd:JmVZd22j2tMT8mWDACjI421oyd
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2756	ausweichspiel.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\ausweichspiel.exe
"C:\Users\Admin\AppData\Local\Temp\ausweichspiel.exe"
1⤵
- Loads dropped DLL
PID:2756

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nse510F.tmp\InstallOptions.dll
Size 15KB
SHA256 f90a0893c0b0ce2ae3f8bb65f383bf656ce33381d6cbac2b25a7d82b34fde9bd
MD5 6f3098fb5f3db26f3bb84f5481109e39
SHA1 9270793e404cc42c6f5be1eb1eb4305f166c656d
SHA512 0462beae0fbd882dc0b6a09547a7959c051928b828e28125b433794de0258f90f3dec8f1920290f114970d2540a113224b8ab372fcee4dfe87f139be4ac0c0d1
SSDEEP 384:lgw9eYfMCU9oJNJJjL3bhLNdSDL6o5VrSRLmCvl:39AleJNbf3tNgDLn28wl
MD5 SHA1 SHA512 SSDEEP

Submit Download