04df4d095a36105942be8be5c147948a99581b6f09c4d17c3e69345a4f2905f7

Analysis

max time kernel
192s
max time network
189s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08/03/2024, 13:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bb63f8372394ec1a4a9a51985d14326e.exe
Size 23.6MB
Sample240308-qt1jkshb2t
SHA256 04df4d095a36105942be8be5c147948a99581b6f09c4d17c3e69345a4f2905f7
MD5 bb63f8372394ec1a4a9a51985d14326e
SHA1 3fb6883687d99d87f6ec190e1e7965e47dbf4950
SHA512 a935d8b1dcc3f689f72c80109efe45b7dc784e21e46fc291bf880cd17388c45501c4099ad84a40cba41afc5afb7e34633a2d44ffd17aac168e9937d8b7a69f4e
SSDEEP 393216:14OnYNAwDDyMTtOQxxuDm4puKT+MWAk4BDmJONvlo3ofrzRUt3f9SNu8q8i:+OYAwjtOVDHTBk4BKi6YTzRfNxTi
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
4980	bb63f8372394ec1a4a9a51985d14326e.exe
4980	bb63f8372394ec1a4a9a51985d14326e.exe
4980	bb63f8372394ec1a4a9a51985d14326e.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\bb63f8372394ec1a4a9a51985d14326e.exe
"C:\Users\Admin\AppData\Local\Temp\bb63f8372394ec1a4a9a51985d14326e.exe"
1⤵
- Loads dropped DLL
PID:4980

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx2566.tmp\InstallOptions.dll
Size 14KB
SHA256 0e014352b64abc431d97460d79757cbafbf6ba997c08b608c294e1f582af269a
MD5 20f3184efe7edddfef3325efc25d12a5
SHA1 8db4c500d73f9525a7e9834df6caea2e70189939
SHA512 433188957a4603c9c61ec698a720021aacf61f46ccc32d5a11bcb6f2d0b1f01e5680635707d8a0ec7a9ef2aa2a85d6dec07ded452e4cb9e280062c0bed555c1a
SSDEEP 192:v4n3T5aK+dHCMR1aQR9RuZl3WWmU7WYZsw1JpVGnrjWK72dwF7dBOne:wn3T5KdHCMRD/R1cOnrjW+BO
MD5 SHA1 SHA512 SSDEEP

Submit Download

LangDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx2566.tmp\LangDLL.dll
Size 5KB
SHA256 4e72c8b4d36f128b25281440e59e39af7ec2080d02e024f35ac413d769d91f39
MD5 ea60c7bd5edd6048601729bd31362c16
SHA1 6e6919d969eb61a141595014395b6c3f44139073
SHA512 f9dc35220697153bb06e3a06caf645079881cb75aed008dbe5381ecaf3442d5be03500b36bbca8b3d114845fac3d667ddf4063c16bc35d29bbea862930939993
SSDEEP 48:im1nEhqneMPUptuMMNvimk2BAZuMTRCpYEvJdUJvR0J6of5dwe:F1jpl9NLBAZuYtR0xd
MD5 SHA1 SHA512 SSDEEP

Submit Download

advsplash.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx2566.tmp\advsplash.dll
Size 5KB
SHA256 e1ae0a39d4d941cdfaf87f1df87f7ec50146e2e32705254e4d3618f74506bb82
MD5 669030d7919ae29999a2fd89aa427202
SHA1 870bcb7e87bbf423abcbc1c5be80f7e63720a6d8
SHA512 1637b854938c6b05938a3a6a06181ae70e23f6cc9a4bca4f8024db65314771197ae3d5008c83dd480ede7fec14d655dae15f439e327fc33c7b70853710621e8f
SSDEEP 96:yqNXqwK188CgAtXvZBkjDf0yf9ysrtWp/wol:yAqrg1XvZB6kYtWp/
MD5 SHA1 SHA512 SSDEEP

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsx2566.tmp\ioSpecial.ini
Size 829B
SHA256 985e504460a5ed74fedcdcb42994cdec2b705fda2b2a765a85588bb6e75ffdbc
MD5 789af311133a69566fe67a5cb9e72006
SHA1 150796758c6d4f5cc298a646f312dc20f374f209
SHA512 a2e9704bc47268047004348f9e69ccce0cdaa1700a8623c5fbc2b7362ef93acb4f965f80fe9052fc63b2a53ac1f8d5ef396eaefca39cfd621dbbe0ddaa6ebd8c
MD5 SHA1 SHA512

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsx2566.tmp\ioSpecial.ini
Size 881B
SHA256 d6cda08259cb31f9b514f81d0db8c4053433d931ebfc018d8c50d2bca152b73c
MD5 8ac45b44d8a5cc4e92d3c01d6b8016c7
SHA1 9adedb45c103182d6840e140b0651c61d0b80eeb
SHA512 e7de283342b7ed442966cf1e0835e26f66ef8f3cff38ed872eeb11161858e099b0e47ed5f72dfb715f9e080b121ec8209b89147b9662402eeaf581339d2c9fe6
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads