032daaf7b4b08a86d3f04346d0c88e5a8ae96e35641a10d88c443c156819bf0e

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
03/06/2024, 06:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

032daaf7b4b08a86d3f04346d0c88e5a8ae96e35641a10d88c443c156819bf0e.exe
Size

9.2MB
MD5

81f832b7b08e8fd2175f0adf3945b7b8
SHA1

308123df727c230d6a2a1cfcf8d03f432f04c911
SHA256

032daaf7b4b08a86d3f04346d0c88e5a8ae96e35641a10d88c443c156819bf0e
SHA512

14671a767fbccbd3398794d4781692d8e97d59ca7a1b2140505e40a54c24660d76de85b7bb18aa4312c6e15035c550067612de54daecd17e3bee16d660d9b29d
SSDEEP

196608:3Ye2HDTbeC7uPW0T1Jn3ovaFF9sqTMjCIIk8x9sFMXfG/CBb:303beC7uPh5B3QaFb7AjCIwXqCp

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
1984	032daaf7b4b08a86d3f04346d0c88e5a8ae96e35641a10d88c443c156819bf0e.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1984	032daaf7b4b08a86d3f04346d0c88e5a8ae96e35641a10d88c443c156819bf0e.exe

C:\Users\Admin\AppData\Local\Temp\032daaf7b4b08a86d3f04346d0c88e5a8ae96e35641a10d88c443c156819bf0e.exe
"C:\Users\Admin\AppData\Local\Temp\032daaf7b4b08a86d3f04346d0c88e5a8ae96e35641a10d88c443c156819bf0e.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
PID:1984

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\Temp\nsy1FD2.tmp\nsDialogs.dll

Filesize
9KB

MD5
6c3f8c94d0727894d706940a8a980543

SHA1
0d1bcad901be377f38d579aafc0c41c0ef8dcefd

SHA256
56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2

SHA512
2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355

Download Submit