02408b212bb7e89fec59dee6cd08b55bbbac3bb592e8de73175c9688ef3bacfd

Analysis

max time kernel
148s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28-02-2024 16:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

IMG-SKFGPC ORDER-2344240 Rekursivitetens.exe
Size

777KB
MD5

3746ddd84331a2869cde387d46a4f7cc
SHA1

9d83a060b20e24fa0c6175db16f32be1f2da4024
SHA256

601bc4c4ff50e846a29e702f894f72b8cea1c7c200b363795ed7905784dde043
SHA512

fdabc8eedb243b00e479583b1021f0281ed48129e7d908d238577bb8e9775403f85e0c0afa97e6202ad6d004222715833e5788b4ee0592c3a385e4669aa338fd
SSDEEP

24576:Ae8hwsezFUtA1te9tTjk5mLgERRdYnzlzmZeE:JsezqtP0AcQozlQJ

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
984	IMG-SKFGPC ORDER-2344240 Rekursivitetens.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\IMG-SKFGPC ORDER-2344240 Rekursivitetens.exe
"C:\Users\Admin\AppData\Local\Temp\IMG-SKFGPC ORDER-2344240 Rekursivitetens.exe"
1⤵
- Loads dropped DLL
PID:984

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3848 --field-trial-handle=3060,i,1774866140584649235,8085848018931772189,262144 --variations-seed-version /prefetch:8
1⤵
PID:4268

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsc5773.tmp\System.dll

Filesize
11KB

MD5
55a26d7800446f1373056064c64c3ce8

SHA1
80256857e9a0a9c8897923b717f3435295a76002

SHA256
904fd5481d72f4e03b01a455f848dedd095d0fb17e33608e0d849f5196fb6ff8

SHA512
04b8ab7a85c26f188c0a06f524488d6f2ac2884bf107c860c82e94ae12c3859f825133d78338fd2b594dfc48f7dc9888ae76fee786c6252a5c77c88755128a5b

Download Submit