4d085c99ff295582f3aba758345adec2527f11841cdaa78f38fccd200c38167f

Analysis

max time kernel
150s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
09/03/2024, 22:07

Target

x-dvd-ripper-platinum.exe
Size

14.2MB
MD5

5617ec67ad5b86e8a4acca3e96fe678b
SHA1

05630304963ed0512ffedf3089035a5505e4d362
SHA256

290189853e47da1ecee6ff62a215a2d517267ba4ff7b03854c45c46c9f5489cd
SHA512

2bedb391cad7f00ab2a2e77a14c2325ada3cc06296588e0db4212a5478aee28db5f76bd7e1220cf651f515e76dfee3f15241c638eb9f46f7dee2f439d9ae7386
SSDEEP

393216:dMSDPZtjlv5jIKQ8EJxC1V9ApCPdvSYImaqE:2SDLhRjnO0ypUvOmRE

Score

7^/10

Loads dropped DLL 2 IoCs

pid	Process
896	x-dvd-ripper-platinum.exe
896	x-dvd-ripper-platinum.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\x-dvd-ripper-platinum.exe
"C:\Users\Admin\AppData\Local\Temp\x-dvd-ripper-platinum.exe"
1⤵
- Loads dropped DLL
PID:896

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nss354A.tmp\LangDLL.dll

Filesize
4KB

MD5
68a2bc20e9033d7d592c0e3db9b1c9a7

SHA1
48f32201f29d897164f4328b3358cca659262597

SHA256
7b5874ea96afe034b0d8a529ced3e97e12d712e9d1d2cb591b82bbce59105db3

SHA512
52283afd58e88b43364c99652cb3d94e8f59dba223aa3c2f5a858e6baf108bfcf99283a7e1f09728bf293f255077620b9a025bbf3ac09d4b22c7b37ea023e648

Download Submit
C:\Users\Admin\AppData\Local\Temp\nss354A.tmp\System.dll

Filesize
9KB

MD5
f3f4da651834fa4044ac1f0b52e23648

SHA1
868e93b5a840f21acb37eae4f934fa3cdf49412e

SHA256
0666031824869382068c7930620a3047e8df762c348d121d03c257efda2b2ee9

SHA512
10c0d78f0888ab2b5877b25eaded6a645458470573b5fdbe7bdd7dff7d01cf00827fcf0cab80d24ef8e3ddda444fa92c29e8e59f68ee6f4213d4d56d54dc228a

Download Submit