Analysis

  • max time kernel
    166s
  • max time network
    174s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/03/2024, 17:43

General

  • Target
    8e27b488a1e9ba920c1e7427ad51a5e9.exe
  • Size 534KB
  • Sample240321-waka5sdf39
  • SHA256 c5663a58153d79aeb1ed3cfcc7f87bddaa1952dfe536507eb95c0920b484742e
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\8e27b488a1e9ba920c1e7427ad51a5e9.exe
    "C:\Users\Admin\AppData\Local\Temp\8e27b488a1e9ba920c1e7427ad51a5e9.exe"
    1⤵
    • Loads dropped DLL
    PID:4228

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 55B
        • SHA256 b9eef05376c0f02622e35ef87d8c4ab058daf7d90dc5bbd3cdf4f41daf922602
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 61B
        • SHA256 eaec4b0c23207ea31b424b3ece2c7e69def1eb05b903299e5a11cd6fd67637a7
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 66B
        • SHA256 cc2cb62750c88907e4ce1bc401db799e61124384516d4629cbfb3b999ef34bf8
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 69B
        • SHA256 20fec4e2745bfe8fd839f8352b86cdd1f584fa4b24d292a008babf62e086fee3
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 60B
        • SHA256 facd67111d2b653cbc6117bd608866f991801caa55f4ed70da0c1c3f42bd6a06
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 60B
        • SHA256 2296374bb06036f908501d75008ee892451f11ccbd93542635b28b272fa559f1
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 80B
        • SHA256 165fd4f6e4cbfca58d9f2ff33409b6a1485a771013b68ae45966bcf7d17b855f
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 80B
        • SHA256 d68fc7e92b8a9602d0b484d7aab22a0c62e22d4f8b54e5ce7e75acd6b1f69840
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 84B
        • SHA256 af48e6eba201187e2d7278d8dac22cb614dd71575048d614ba5f436629370aa3
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 96B
        • SHA256 2a4821cfa88f9e912f6f53b8b5cd82e401f9801e430224a681e9c526f62ad331
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 99B
        • SHA256 4a5775b0889d48f521538f6692f9c53913d024a76af2af36cda7eac9802c6185
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 64B
        • SHA256 e1401861e35ee23672901fdda32492b407cbd0c6a2a8f008a2fe5f2775a2958f
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 77B
        • SHA256 6a6e175a7ca2f7a483b70f797aab60749f9a8f911511a4cc2fb669cb04ed7530
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 85B
        • SHA256 ae283b836fa9d2f60bc6e28930e2a9cb0144d5252c17457b04b93f0026a90934
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 100B
        • SHA256 d821f84b87edda64b7015dd39d1bddc2fbdb69e8d1a72c32bc3259568ede83c0
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 68B
        • SHA256 25593ec908d7fb7ee3f6e76604bf6e8c19696e90f72dfe1da40cf8f499fd2e0f
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 105B
        • SHA256 a47436ca744d9f4ad353bdf3825ef5b21c785a9aa16d1233d8aeef33bcd1db9e
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 120B
        • SHA256 3bd72d4a18ac3e4b375dde4e2339eee0ca57a28244dfc98009f54071a75a8c3f
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 123B
        • SHA256 39b013b7e6a6f1a5a040b5dad9eefd1bea303842cc8715abe4e14ff6575f8f56
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 80B
        • SHA256 85e1bb75bb19919cdeb5f1e146fabd5cbda85cc7325d23fcc4d692f7e74794dd
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 88B
        • SHA256 900c62cc4188fa198ed1657dbc12775661aa5c2232bda9c43142e049c5c9fbc0
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 91B
        • SHA256 fb0f17c8deb150a5fc9578dfcd7d482199cf2db27e1acc19788ea3de40702226
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 103B
        • SHA256 8cc191898e2844781b53f14db3bbe11153c0cc03d986182d6b9e7cea3aea1d78
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 104B
        • SHA256 ed7721c2361f7ac0f7a601a8153ea5bb809194294f0230e79261c7529ccdf051
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 115B
        • SHA256 10f68006cf5c7a80b625b3323e25d275deeb4bde4e007455b9343219a20f1697
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 125B
        • SHA256 e3bf3353382c44b81974a06239b9791eba78bc303e574cbf8ad4731bc3543b7d
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 84B
        • SHA256 bdba1b445aa737c6803f2b9cfa05f4865029210e528d6db46db59423ed991f31
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 93B
        • SHA256 458c4272a071cb86b9d1c27c103b7462891d180541ad0d06ba2974db0b03df3e
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 83B
        • SHA256 884a935a2c03c220dfeb62bea02d289069c5f84e3dc6cabe4c606e884362790a
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 84B
        • SHA256 69547cb6e42dfdc2f0d90440d1fb6e7d0cc887658ec5192cad4a02ead8f5fe91
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 86B
        • SHA256 92793c9eb0bb235c7f4f203092bfa04e39c71373e8c0a3b239ad8f9b748f2e63
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 95B
        • SHA256 825cf975bedc8351e5dfb5ae6ca37b1919450156545a3f61daaa6f66840abfb0
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 100B
        • SHA256 f3e010af71ac7ee31d4e97940983e9d7b4860f35daae17da8aac46f17b3ec13f
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 107B
        • SHA256 cc3f4724de1f1aeb5d3f6e416c75e8adf0b288d9ad0702de9c72a05dac65b5d5
        • MD5 SHA1 SHA512

        Setup.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Setup.ini
        • Size 109B
        • SHA256 9fe9cb54b8623e3035bb4cd7b472fabaed913e7960e0f65731ee5be12166022c
        • MD5 SHA1 SHA512

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsr9C0.tmp\System.dll
        • Size 11KB
        • SHA256 fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e
        • MD5 SHA1 SHA512 SSDEEP

        redesire.ini

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\redesire.ini
        • Size 39B
        • SHA256 156183b7f57733ada6aa67bb80c4d7cbce9d6ccfdca5401b83e1bba82e15b7a0
        • MD5 SHA1 SHA512

        stumped.ini

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Templates\stumped.ini
        • Size 31B
        • SHA256 efd47c5522ea313270c1de23034746bbb0d5835f2f8e414ddca5ff66178207be
        • MD5 SHA1 SHA512

        memory/4228-763-0x0000000004240000-0x0000000005D30000-memory.dmp

        memory/4228-764-0x0000000004240000-0x0000000005D30000-memory.dmp