402f2863dc43677d036910526950e9c71df2c98d7ad198047728377f38cbb8d5

Analysis

max time kernel
1s
max time network
32s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
12-03-2024 20:43

Target

402f2863dc43677d036910526950e9c71df2c98d7ad198047728377f38cbb8d5.exe
Size

2.0MB
MD5

6048c5c4f0f3e76d854446c28c17653a
SHA1

c88d93d07bb89d285edd618240c5679c10a612e4
SHA256

402f2863dc43677d036910526950e9c71df2c98d7ad198047728377f38cbb8d5
SHA512

b3808f1234a05d4c6f3497f85e76885f2bd18c32a094b38420e81c963cfef1915587168e54b139844fe367add0a5662e1961af254c3e65c6346cc4cba1a1393c
SSDEEP

49152:L3JUfiVekOjfxDhksidgGWoY4QcdJJ0evW5oW00hJuWWNjR:9UUehLhhksidnWX4Q00eh9IOjR

Score

7^/10

Loads dropped DLL 1 IoCs

Processes:

402f2863dc43677d036910526950e9c71df2c98d7ad198047728377f38cbb8d5.exe

pid process

2144 402f2863dc43677d036910526950e9c71df2c98d7ad198047728377f38cbb8d5.exe
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

pid	process
2144	402f2863dc43677d036910526950e9c71df2c98d7ad198047728377f38cbb8d5.exe

C:\Users\Admin\AppData\Local\Temp\402f2863dc43677d036910526950e9c71df2c98d7ad198047728377f38cbb8d5.exe
"C:\Users\Admin\AppData\Local\Temp\402f2863dc43677d036910526950e9c71df2c98d7ad198047728377f38cbb8d5.exe"
1⤵
- Loads dropped DLL
PID:2144

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsa6CC7.tmp\INetC.dll

Filesize
21KB

MD5
2b342079303895c50af8040a91f30f71

SHA1
b11335e1cb8356d9c337cb89fe81d669a69de17e

SHA256
2d5d89025911e2e273f90f393624be4819641dbee1606de792362e442e54612f

SHA512
550452dadc86ecd205f40668894116790a456fe46e9985d68093d36cf32abf00edecb5c56ff0287464a0e819db7b3cc53926037a116de6c651332a7cc8035d47

Download Submit