Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/03/2024, 00:04

General

  • Target

    d769c5d82ab1a1db1d9b64fbe5ca1aeb.exe

  • Size

    226KB

  • MD5

    d769c5d82ab1a1db1d9b64fbe5ca1aeb

  • SHA1

    cf58636816bedc506978d116a8310f7b47eeceb2

  • SHA256

    20d668de3600a32fa02151dcd9b9dbd072c858ea54cb04fe835e06b1f4d450d0

  • SHA512

    d85ab1b70018280dcd5dbe9d073ab6656f31518d51e7a5e7871bee517c582a7e8de3c44e95106c969cab23cb5c2d0c079ccb92a95d2d5deffa1fdf6201bec110

  • SSDEEP

    3072:JweqOYEUXPnGuReQQBfi4oQLNuIuTS4mCcqBot8wxq+FT:uEUXV7Qi+uIuTSMcqWJR

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\d769c5d82ab1a1db1d9b64fbe5ca1aeb.exe
    "C:\Users\Admin\AppData\Local\Temp\d769c5d82ab1a1db1d9b64fbe5ca1aeb.exe"
    1⤵
    • Loads dropped DLL
    PID:2012

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\nsi57D2.tmp\System.dll

          Filesize

          11KB

          MD5

          bf712f32249029466fa86756f5546950

          SHA1

          75ac4dc4808ac148ddd78f6b89a51afbd4091c2e

          SHA256

          7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af

          SHA512

          13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4

        • \Users\Admin\AppData\Local\Temp\nsi57D2.tmp\UserInfo.dll

          Filesize

          4KB

          MD5

          c7ce0e47c83525983fd2c4c9566b4aad

          SHA1

          38b7ad7bb32ffae35540fce373b8a671878dc54e

          SHA256

          6293408a5fa6d0f55f0a4d01528eb5b807ee9447a75a28b5986267475ebcd3ae

          SHA512

          ee9f23ea5210f418d4c559628bbfb3a0f892440bcd5dc4c1901cb8e510078e4481ea8353b262795076a19055e70b88e08fee5fb7e8f35a6f49022096408df20e

        • \Users\Admin\AppData\Local\Temp\nsi57D2.tmp\inetcw.dll

          Filesize

          22KB

          MD5

          5b6759d98b6ed62f6f8d501fba6505fa

          SHA1

          f3a9d9e252faba24ff14a8d80e4786d66b20a717

          SHA256

          c97c576acddaa932188ff07f31999ba663b838d77a38eab5aed25553417f613f

          SHA512

          e2bafcdaff8af11efbc90d18fba30762f6054ed08836c4174bd054f5575c7252c8839077d025b3e0fbcc9a2237f47d33b770e0304d43a2616700b78a8dfde310