72a371ab6b579a3b4c51a9c2960734334c536726b9b7cc29f2ac8f6858fd8be0

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
07/03/2024, 20:22

Target

b99210af83e2530bb6be8fb9f67dc8d1.exe
Size

395KB
MD5

b99210af83e2530bb6be8fb9f67dc8d1
SHA1

23f3d0f44b30b05385eb078700e532a45c517cf8
SHA256

72a371ab6b579a3b4c51a9c2960734334c536726b9b7cc29f2ac8f6858fd8be0
SHA512

3e11dfd0e03977a34a3c30041e65178be73fac59b092b6804fb949ef4631022c9ec95dcbce2e1d867da2c372f495870268a041008709b8bd661efd2544bf45ad
SSDEEP

12288:RM4vWV1i0ogZ7PgW9JE72SiwEBGTFFlQEqF29EKHu:RM4vWXi0ocDCPF6S1qFmEKHu

Score

7^/10

Loads dropped DLL 4 IoCs

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\b99210af83e2530bb6be8fb9f67dc8d1.exe
"C:\Users\Admin\AppData\Local\Temp\b99210af83e2530bb6be8fb9f67dc8d1.exe"
1⤵
- Loads dropped DLL
PID:2752

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsy35B7.tmp\NSISdl.dll

Filesize
14KB

MD5
254f13dfd61c5b7d2119eb2550491e1d

SHA1
5083f6804ee3475f3698ab9e68611b0128e22fd6

SHA256
fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28

SHA512
fcef8ac5bd0ee6e316dbbc128a223ba18c8bf85a8d253e0c0877af6a4f686a20b08d34e5a426e2be5045962b391b8073769253a4d9b18616febc8133ccf654f7

Download Submit