Analysis

  • max time kernel
    150s
  • max time network
    163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/03/2024, 21:41

General

  • Target

    Dev-Cpp_5.11_TDM-GCC_4.9.2_Setup.exe

  • Size

    48.1MB

  • MD5

    581d2ec5eff634a610705d01ec6da553

  • SHA1

    599853e3331311f9ef81b1e633d7713dd258f81d

  • SHA256

    faad96bbcc51f115c9edd691785d1309e7663b67dcfcf7c11515c3d28c9c0f1f

  • SHA512

    5f1787a7797ad2b9ecd4dddae308ef2817384e37d75ace9eafb77c4d29520dee76d2eb6daa708407aa55b49d1e2d8c3c0d40d36eff10eb3c128b9395c132ee19

  • SSDEEP

    1572864:mGxx+CAuJvR5aMskBmiBecYxnKZA+aBd8:XxxBz7s4deZxBd8

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\Dev-Cpp_5.11_TDM-GCC_4.9.2_Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Dev-Cpp_5.11_TDM-GCC_4.9.2_Setup.exe"
    1⤵
    • Loads dropped DLL
    PID:4136
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=768 --field-trial-handle=2304,i,6987730730348465820,3913273227385401271,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:1920

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\nsf1E53.tmp\LangDLL.dll

      Filesize

      5KB

      MD5

      9384f4007c492d4fa040924f31c00166

      SHA1

      aba37faef30d7c445584c688a0b5638f5db31c7b

      SHA256

      60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5

      SHA512

      68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf