4f282b3292993f9ae7320d5e23bd61706484397b7146921fb4b6936428a97a4e

Analysis

max time kernel
145s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
23/02/2024, 22:39

Target

HA_PlatoDVD2Zune6.66_LRH.exe
Size

4.5MB
MD5

7e98d7b65d9421bffff99c2a62ce3b4f
SHA1

8fa2fb1432b187d5d71755b424c3eb61822119b4
SHA256

890dbd23b94ebd388853c4dd4e79b1a3b13e9fbc81796d7b9bcd63b8308aaae1
SHA512

c59d3776982a653401c9ce53c4bddb27c41df1d3a158fe72f1081522a79167ac53a1752cf2a1e118a72c7c64a76acbfcafbbf60c62f9c7bc4fc4c77c2e9da9fe
SSDEEP

98304:P9VKfoLSNVwNUsm0zcOyqgduiAEnqITEJOOyhKrWmlyj5sbQX:iwLSNVoUvor0qI4MOCKrWmK5+0

Score

7^/10

Loads dropped DLL 3 IoCs

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\HA_PlatoDVD2Zune6.66_LRH.exe
"C:\Users\Admin\AppData\Local\Temp\HA_PlatoDVD2Zune6.66_LRH.exe"
1⤵
- Loads dropped DLL
PID:3932

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsmCB70.tmp\InstallOptions.dll

Filesize
12KB

MD5
83304a78d2b6ea45ea8404f4cd78721f

SHA1
d5c5d19653c751c08579dd094bcc9fef1841af00

SHA256
92344973083c0a5d8f5732814c1315124e8e0a2f1ed912583a081f95f7549414

SHA512
94076cc935927925641d668c19b389d007ff7e8623f2afe706fc73d1ecb97210577a828a727404b200d9870e14b23d6bd047de9201d629e7443a929c0740c67e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmCB70.tmp\brandingurl.dll

Filesize
3KB

MD5
9c3488b5e9655d1837c3963ecec33f70

SHA1
f0fa9b4c29e75c6e4419c4633d09f2797aee2ef3

SHA256
05ef4beb7fab9d04c1fb251874166fa2d73a34b4a7f2b145d37a2fd00c88979a

SHA512
6af9f88d65d2279a71620f2a656062b1737b3a9a1692ed4e5887bdee891ce08d21c5c0b25ab3acbe6da9fe255dcd7f8a517c2751e73dc56add216740c945e4a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmCB70.tmp\ioSpecial.ini

Filesize
676B

MD5
86593b7cfe0e53a1e272a747106ac613

SHA1
a334c285a1c999aac7bdcc23a13593749a84a268

SHA256
d2790c9a203bf60ad31f3546711b9647a96abdf8f6e81a80c0a0ce8fc9e67b11

SHA512
3ef429a3a1c892e265d674f5d17eaf555b32bc1fd1c79d13f5b6fa85a3f6ed446159f2a793e215170607e2e6becce65a9bd9223b396b8bc365b591ca42897b27

Download Submit