Resubmissions

31/05/2024, 15:07

240531-shr46scg46 8

31/05/2024, 15:06

240531-sg6aeacb5t 8

Analysis

  • max time kernel
    1353s
  • max time network
    1179s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/05/2024, 15:06

General

  • Target

    7tt_setup.exe

  • Size

    1.8MB

  • MD5

    24bff5aed0fed2b49ba25b569b1cbed4

  • SHA1

    84efa82ba9832c74c8e403d54f3f4bfaf475ec37

  • SHA256

    79f8611aa5e6b8e8dae0c6f2d7625d4877ddaff427d4801fe7ab77ae61d27f58

  • SHA512

    e7bcd9794479716dbff7d9bb8e59b36e7380ba61f3ab081a4b803f746503a7256daabaede11743b022f93eeb69d899eb0bad960a736fcba38275eb1ec2bfb892

  • SSDEEP

    49152:4PBTiedxx42kHT1UlooDUpi66GfgRVYC0XpjPe:45xdxxWzaDEZfgr5uc

Score
4/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\7tt_setup.exe
    "C:\Users\Admin\AppData\Local\Temp\7tt_setup.exe"
    1⤵
    • Loads dropped DLL
    PID:2100

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\nsf2E07.tmp\LangDLL.dll

          Filesize

          5KB

          MD5

          68b287f4067ba013e34a1339afdb1ea8

          SHA1

          45ad585b3cc8e5a6af7b68f5d8269c97992130b3

          SHA256

          18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026

          SHA512

          06c38bbb07fb55256f3cdc24e77b3c8f3214f25bfd140b521a39d167113bf307a7e8d24e445d510bc5e4e41d33c9173bb14e3f2a38bc29a0e3d08c1f0dca4bdb

        • C:\Users\Admin\AppData\Local\Temp\nsf2E07.tmp\System.dll

          Filesize

          12KB

          MD5

          cff85c549d536f651d4fb8387f1976f2

          SHA1

          d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

          SHA256

          8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

          SHA512

          531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88