Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    01-05-2024 21:13

General

  • Target

    TotalAV.exe

  • Size

    68.5MB

  • MD5

    0562dbe0c247c939fa39caf3b13a3e16

  • SHA1

    e54078a1eea1b359089749dca32a56f33aa21a2e

  • SHA256

    23a66b32dfa75a94036870a1dce0bfabe6b52331eb2bed02e6953b9fead97298

  • SHA512

    68325b00062f9a57d37c1e71c10a9de40e6c32d571502cdec941a52748f9743cd0ede95bbfb447ec0e2f9725c40d7028070ffdbb7417be4cb9cefc394af282e1

  • SSDEEP

    1572864:FE8rnomm29tWOt/JV1yNdSTSCfrK57dVaeXAaW7Dzlt0n:CKommoWOt/lyNdSTlrKJ3DwaunTc

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\TotalAV.exe
    "C:\Users\Admin\AppData\Local\Temp\TotalAV.exe"
    1⤵
    • Loads dropped DLL
    PID:2764

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\nsd2E43.tmp\System.dll

    Filesize

    11KB

    MD5

    fccff8cb7a1067e23fd2e2b63971a8e1

    SHA1

    30e2a9e137c1223a78a0f7b0bf96a1c361976d91

    SHA256

    6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e

    SHA512

    f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c