05e9bb0df411e4c57a2d41a6d5aa59e3669dffe8e47894c2c620147b64e950e4

Analysis

max time kernel
121s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/05/2024, 22:33

Target

$PLUGINSDIR/BI.exe
Size

75KB
MD5

6964bdfaed9fee6a60e24928a45c3c85
SHA1

57f9ae81840ae02483c9191e4f9d0209b033c817
SHA256

209b8cef0922660712526d81e593e4e367e848f255d686771e7914ea701ff7a5
SHA512

266df60f87737c4f9c0780a58bfb36eeef5c765e12fcc8c70d6a05e468e879acaf3c90fd7add1cc8cec39268d949a0509741ca61ffad09ec94bd7315ef4c6be5
SSDEEP

1536:KVdePelp2Xy+tuQOzOYE5aXPni9F8yggK0acQ2XzDvn:lweqOYEUXPni/vn

Score

7^/10

Loads dropped DLL 3 IoCs

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\BI.exe
"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\BI.exe"
1⤵
- Loads dropped DLL
PID:2184

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

\Users\Admin\AppData\Local\Temp\nsy85E4.tmp\inetc.dll

Filesize
29KB

MD5
dccdcb124064a1d9a5eb12232348b898

SHA1
f294fac154cb1c6c18fe054ac584f767594b93fb

SHA256
37adc0183d94ae6ca1895643423dac0c97750d7103e6b00c14299dfc4ad2271e

SHA512
bd89bcd513bb7120db80e1115b4caceaa18c4ea863fe29b232002d447c3813133ff2849fcb2d4df45e3ff67e0e0d9d340d61060b9c74045b17efa5b1c1f5b05e

Download Submit