Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-03-2024 16:25

General

  • Target

    SetupAuto.exe

  • Size

    512KB

  • MD5

    ff0198fd1f59b71c1deec34b6b0b0c07

  • SHA1

    cae622ad91a3bab0996589e3bf905c9d4eeb6059

  • SHA256

    f552d818f17841efb7f06803ecd2479fe5c9b2a0d3c4dad2c9d90b42e2e9d7d5

  • SHA512

    96795276eefcde81b0ad4ac85f4aaec368cb93bd9e9912c343316912f1502f3a22d845af3ba75ea5aa92b1936028558d48c11a77d331d49bd77f58b886868ccc

  • SSDEEP

    12288:Qnm2P17YuUAlhZk4ZN5lviET7MacVdekBCaeKOKEZQM7gM7ZQN:Qnh17YuUAlh+S5ZdT7sbekOKEZQM717M

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SetupAuto.exe
    "C:\Users\Admin\AppData\Local\Temp\SetupAuto.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:3000

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsd22AE.tmp\ioSpecial.ini

    Filesize

    694B

    MD5

    acd21ed02575df0c4b1aed2dd71a43dc

    SHA1

    c4d50cd8f4917b1c69f942d972341c6fa2a0c58c

    SHA256

    0fba7bce88f50bfea0298bed67e4a0ea5ac3d16dd17c83058a7157b65faf0746

    SHA512

    adda923f607b78176f81aabc8492e367557627364b78cd98e310e715840808f4a230d518e5cf0d5a0c4dc6480c89f3d2e6d0a8ed9875dc9c353acb0e7b1ed331

  • \Users\Admin\AppData\Local\Temp\nsd22AE.tmp\InstallOptions.dll

    Filesize

    14KB

    MD5

    325b008aec81e5aaa57096f05d4212b5

    SHA1

    27a2d89747a20305b6518438eff5b9f57f7df5c3

    SHA256

    c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    SHA512

    18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf