a990c3f49d68d4fa59c91948f939a644cf0fe305c5ead873073c886c4d581de2 | Triage

Submit
Reports

Overview

overview

3

Static

static

3

a990c3f49d...e2.exe

windows7-x64

3

a990c3f49d...e2.exe

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDIR/LogEx.dll

windows7-x64

3

$PLUGINSDIR/LogEx.dll

windows10-2004-x64

3

$PLUGINSDI...in.dll

windows7-x64

1

$PLUGINSDI...in.dll

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

CommonWindow.dll

windows7-x64

3

CommonWindow.dll

windows10-2004-x64

3

ICSDHCP.dll

windows7-x64

1

ICSDHCP.dll

windows10-2004-x64

1

ImageOleCtrl.dll

windows7-x64

1

ImageOleCtrl.dll

windows10-2004-x64

1

InstallDriver.exe

windows7-x64

3

InstallDriver.exe

windows10-2004-x64

3

IpLib.dll

windows7-x64

1

IpLib.dll

windows10-2004-x64

3

MiniNews.exe

windows7-x64

1

MiniNews.exe

windows10-2004-x64

1

RaAPAPI.dll

windows7-x64

1

RaAPAPI.dll

windows10-2004-x64

1

Repair_WiFi.exe

windows7-x64

1

Repair_WiFi.exe

windows10-2004-x64

1

RtlIhvOid.dll

windows7-x64

1

RtlIhvOid.dll

windows10-2004-x64

3

RtlLib.dll

windows7-x64

3

RtlLib.dll

windows10-2004-x64

3

Analysis

max time kernel
130s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 01:37

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

a990c3f49d68d4fa59c91948f939a644cf0fe305c5ead873073c886c4d581de2.exe

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

a990c3f49d68d4fa59c91948f939a644cf0fe305c5ead873073c886c4d581de2.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/FindProcDLL.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/FindProcDLL.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/KillProcDLL.dll

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/KillProcDLL.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/LogEx.dll

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/LogEx.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/SetupPlugin.dll

Resource

win7-20240215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/SetupPlugin.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/nsExec.dll

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

CommonWindow.dll

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

CommonWindow.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

ICSDHCP.dll

Resource

win7-20240220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

ICSDHCP.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

ImageOleCtrl.dll

Resource

win7-20240419-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

ImageOleCtrl.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

InstallDriver.exe

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

InstallDriver.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

IpLib.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

IpLib.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

MiniNews.exe

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

MiniNews.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

RaAPAPI.dll

Resource

win7-20240220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

RaAPAPI.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

Repair_WiFi.exe

Resource

win7-20240419-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Repair_WiFi.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

RtlIhvOid.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

RtlIhvOid.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

RtlLib.dll

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

RtlLib.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Report Analysis Logs

General

Target

a990c3f49d68d4fa59c91948f939a644cf0fe305c5ead873073c886c4d581de2.exe
Size

3.2MB
MD5

c363a0c86e73dca815cfe6e828634b23
SHA1

7899ba0934f84891ec6a9f3e1a9dd11da7aedc58
SHA256

a990c3f49d68d4fa59c91948f939a644cf0fe305c5ead873073c886c4d581de2
SHA512

869116c9bb3d3ddd2f30d96b38decaf76dc75921b5222405fcf1eb27864193ef1a5730ea89e5403e742f8c70275ab7c17dafa145d6d529583d967eb087ec9fac
SSDEEP

98304:idWZorcKUo4/hHLYaQWhObQREI3K4OkY8iC:iw25T4/hHLY/2ObQ2adYo

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Processes

C:\Users\Admin\AppData\Local\Temp\a990c3f49d68d4fa59c91948f939a644cf0fe305c5ead873073c886c4d581de2.exe
"C:\Users\Admin\AppData\Local\Temp\a990c3f49d68d4fa59c91948f939a644cf0fe305c5ead873073c886c4d581de2.exe"
1⤵
PID:2316

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy