e723ee615d7a64e918ab185b645324a0cb1b376302d33b54995b54da39be51f3

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
19-05-2024 20:31

Target

$PLUGINSDIR/autopoweron.exe
Size

1.6MB
MD5

fc7a668a581fc7a511f54dbea3a2ab0a
SHA1

b5d783f2ef60a53b1168efcd42bb9bf4c4551fc5
SHA256

da4419f3cd770012d0a6be1f7f7330611dad237f156f446887cd6f11827769f9
SHA512

61c6384239324d06c89612eb364aef44b700f346f95eef8d6a07ef43a1ac39b60a73c842aaf5564a5a14480e3be3fc9d3c6ddb76c1dee4d3e5cf02c0f0491244
SSDEEP

49152:60f6wkRh2DvrwSNMzsl+1FqTe/yUpcNafcMYW4FG:gtGrwSegS4et0MYW4FG

Score

7^/10

Loads dropped DLL 1 IoCs

Processes:

autopoweron.exe

pid process

2688 autopoweron.exe
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

pid	process
2688	autopoweron.exe

C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\autopoweron.exe
"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\autopoweron.exe"
1⤵
- Loads dropped DLL
PID:2688

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsi34BD.tmp\InstallOptions.dll
Filesize
14KB

MD5
0dc0cc7a6d9db685bf05a7e5f3ea4781

SHA1
5d8b6268eeec9d8d904bc9d988a4b588b392213f

SHA256
8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

SHA512
814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsi34BD.tmp\ioSpecial.ini
Filesize
633B

MD5
458c09602adf10077fb04ba9887b0057

SHA1
d9d25f6ada5f9cafde357a021835dd5641f604d1

SHA256
d052b0e9affd6e7171f5c7c870c2ab277a0fd0b3d94dabe420a432ebe0221de4

SHA512
461531f4ae815fcd9715e6cbe074af3a991fe3ab13cdb22cb334a93c8198d4490f84b8f95d5d79492a77cda7c34cb6d1711f91356abcecdef120d39bc9a38942

Download Submit