92638a7c733b36df5a859ed1c3b94be1b5d82753749c13b0184f72cbae0895d6

Analysis

max time kernel
140s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
05/06/2024, 03:41

Target

jamovi-2.5.5.0-win-x64.exe
Size

325.6MB
MD5

c7b191ca9b8a0f27dd50d7c6e24a4bdf
SHA1

ead5c7aa3fc314be017d154c44ac10509eea55d0
SHA256

92638a7c733b36df5a859ed1c3b94be1b5d82753749c13b0184f72cbae0895d6
SHA512

17926317c1dd0f15b753fe8830d5a457818ccd5136dd0d693a62804acd31f08a38fac3a2c16f16526340a7a3be3fc4ab1d38d9f17644405bcd86a29777f04bf0
SSDEEP

6291456:EcwVVjA5CpyUw6dKqPQnc6edNaok9EkynxSq03HuRURTwvcLP:Ecwr/pyleYnc6edNaokakynuum0cT

Score

7^/10

Loads dropped DLL 3 IoCs

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\jamovi-2.5.5.0-win-x64.exe
"C:\Users\Admin\AppData\Local\Temp\jamovi-2.5.5.0-win-x64.exe"
1⤵
- Loads dropped DLL
PID:3508

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsjD071.tmp\System.dll

Filesize
12KB

MD5
4add245d4ba34b04f213409bfe504c07

SHA1
ef756d6581d70e87d58cc4982e3f4d18e0ea5b09

SHA256
9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706

SHA512
1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsjD071.tmp\UserInfo.dll

Filesize
4KB

MD5
d458b8251443536e4a334147e0170e95

SHA1
ba8d4d580f1bc0bb2eaa8b9b02ee9e91b8b50fc3

SHA256
4913d4cccf84cd0534069107cff3e8e2f427160cad841547db9019310ac86cc7

SHA512
6ff523a74c3670b8b5cd92f62dcc6ea50b65a5d0d6e67ee1079bdb8a623b27dd10b9036a41aa8ec928200c85323c1a1f3b5c0948b59c0671de183617b65a96b1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsjD071.tmp\nsDialogs.dll

Filesize
9KB

MD5
1d8f01a83ddd259bc339902c1d33c8f1

SHA1
9f7806af462c94c39e2ec6cc9c7ad05c44eba04e

SHA256
4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed

SHA512
28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567

Download Submit