2fa51d9e1f5ce2b519169d52b98576fb5a8cf138944156bdfa6a6f62f846cd2d

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
25-02-2024 12:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ArrowDL_x64_Setup.exe
Size

30.1MB
MD5

4210328fe99089231977546e835434b8
SHA1

6bb2f973c14a769ddd5954419b3eec6ad0d84209
SHA256

2fa51d9e1f5ce2b519169d52b98576fb5a8cf138944156bdfa6a6f62f846cd2d
SHA512

2d5b3e66d88773c22626ef9f4fc7f3eb3b2d6912cfccb0b34c481b1fcf3c6854467460ca6d6fb5395882e95872295e6774f579ab3880a53cf0dea429020b2e15
SSDEEP

786432:8nfxrHhE4iim3VJxh9LBtZzW/HDrDx0ga42NGecVUn9ds9q7M6G:8nfZhpiLXpZzIPxfa/NGecVJd6G

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
1100	ArrowDL_x64_Setup.exe
1100	ArrowDL_x64_Setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\ArrowDL_x64_Setup.exe
"C:\Users\Admin\AppData\Local\Temp\ArrowDL_x64_Setup.exe"
1⤵
- Loads dropped DLL
PID:1100

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsn33F2.tmp\LangDLL.dll

Filesize
5KB

MD5
50016010fb0d8db2bc4cd258ceb43be5

SHA1
44ba95ee12e69da72478cf358c93533a9c7a01dc

SHA256
32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e

SHA512
ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsn33F2.tmp\nsDialogs.dll

Filesize
9KB

MD5
1d8f01a83ddd259bc339902c1d33c8f1

SHA1
9f7806af462c94c39e2ec6cc9c7ad05c44eba04e

SHA256
4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed

SHA512
28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567

Download Submit