Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 21:41

General

  • Target

    Dev-Cpp_5.11_TDM-GCC_4.9.2_Setup.exe

  • Size

    48.1MB

  • MD5

    581d2ec5eff634a610705d01ec6da553

  • SHA1

    599853e3331311f9ef81b1e633d7713dd258f81d

  • SHA256

    faad96bbcc51f115c9edd691785d1309e7663b67dcfcf7c11515c3d28c9c0f1f

  • SHA512

    5f1787a7797ad2b9ecd4dddae308ef2817384e37d75ace9eafb77c4d29520dee76d2eb6daa708407aa55b49d1e2d8c3c0d40d36eff10eb3c128b9395c132ee19

  • SSDEEP

    1572864:mGxx+CAuJvR5aMskBmiBecYxnKZA+aBd8:XxxBz7s4deZxBd8

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Dev-Cpp_5.11_TDM-GCC_4.9.2_Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Dev-Cpp_5.11_TDM-GCC_4.9.2_Setup.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2364

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\nsyA7E.tmp\LangDLL.dll

    Filesize

    5KB

    MD5

    9384f4007c492d4fa040924f31c00166

    SHA1

    aba37faef30d7c445584c688a0b5638f5db31c7b

    SHA256

    60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5

    SHA512

    68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf