1234fca475092501d14959a1150d53c1817759cfb3960376640065467590cd66

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 07:38

Target

$PLUGINSDIR/$_356_/DownloadAcc.exe
Size

163KB
MD5

305af6be819ca06d6088fabfa3b4ce5e
SHA1

6e4c55b28863df05b6cc91072cbf2ab0865dd677
SHA256

16971b1bd82a3dc497f4d80a975c25e855a506a9490d0afb8661e220f8aad615
SHA512

9964507a6bc87b84d8ac089a8e948e4017f34912d18a05d1d871e7a6e64cf6170233650c986b4cde820b8847ecbd04e3354c24006af393687203a191b46d2a8f
SSDEEP

3072:8weqOYEUXPn2M+aUGHV0pn40pTEnVe+csybUnawkKJq:9EUXuYVEn4VVQ3uq

Score

7^/10

Loads dropped DLL 2 IoCs

Processes:

DownloadAcc.exe

pid process

1612 DownloadAcc.exe
1612 DownloadAcc.exe
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

pid	process
1612	DownloadAcc.exe
1612	DownloadAcc.exe

C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\$_356_\DownloadAcc.exe
"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\$_356_\DownloadAcc.exe"
1⤵
- Loads dropped DLL
PID:1612

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

C:\Users\Admin\AppData\Local\Temp\nsz4577.tmp\DownloadACC.dll
Filesize
218KB

MD5
eada60fb6d31f337511fe0d385b8396c

SHA1
5e2da91eb2463c48e0f025428cc04154f11118db

SHA256
f8b5dd8c68ab947d16dc8c43dc931a74b0230e411896009e06f5e6fc4d002422

SHA512
b1373ce736a220ae873bbe8f887f85f5291c50c1148e9b00a1994f35129e2014f41e193bdba5b4e863d82b81ff0ac1251093ff4390a0a17e9526e8a2d0748d4e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz4577.tmp\System.dll
Filesize
17KB

MD5
a4f38d1c7a480f5da1bb8097b8b939db

SHA1
b3129c2a0e61881381463f5e0cbbffa573daa845

SHA256
e1180e1e3344c7536150275e33de53dc1dd1a3ca03be66c4d4875fe5bcd4e436

SHA512
fed89f7ee9364fc2f4b9f82c4563713497043947e98dbb03e7d755681adf3ae661aba80d08e59988a23695fc64481b69d9842b7ec7d2b572cc872c4c9957febc

Download Submit