9742689a50e96ddc04d80ceff046b28da2beefd617be18166f8c5e715ec60c59

Analysis

max time kernel
140s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 18:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vlc-3.0.21-win64.exe
Size 42.9MB
Sample240612-wxsk2aydkl
SHA256 9742689a50e96ddc04d80ceff046b28da2beefd617be18166f8c5e715ec60c59
MD5 a6f92affb6ce711f9f5048410cb4bc32
SHA1 80d994fb95087efce34aeb4a98c8f4d7d2a035a6
SHA512 1a8ff18e29514c48b29fab5ad419b506610c462c09891b4ba6dc0cee550d05eed03bed8d018b9bd61b3d81e1848da7845d53c1b01a508dd87381791541a44f2c
SSDEEP 786432:7OvIHtds0udYsBQv3eva1Umww8RZLyP7QL5ojI54qcDhvcOm:2C3/sB0eyyxwXP7QL+jI5UDNcH
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
3496	vlc-3.0.21-win64.exe
3496	vlc-3.0.21-win64.exe
3496	vlc-3.0.21-win64.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\vlc-3.0.21-win64.exe
"C:\Users\Admin\AppData\Local\Temp\vlc-3.0.21-win64.exe"
1⤵
- Loads dropped DLL
PID:3496

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

LangDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsu38F4.tmp\LangDLL.dll
Size 8KB
SHA256 42c46cde21b03935314697ef444b01d85e319fc443519bde35fec90c8b21fc98
MD5 6a4ce8d10efd06369f368898462546e0
SHA1 79b9c182afcfddb4687663f287327fb968731c1b
SHA512 8a5f1d1bf6fef5ed5b51f41129715bdad0ebabb539c0260b080e567a101db7acdba722a9df5e55527ccdd2bf05a009bfee3c4a3745825c953f3348ef55e61918
SSDEEP 96:e0nLo47eYkrGj23kBTPEa8ir2qUuRkNB/RMZCabEe/2/HdNfdpX2N:foZYkrGj20tEEeYkv/RaCw/2/9h2N
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsu38F4.tmp\System.dll
Size 28KB
SHA256 b07a12c5ced6a1ece5e7dc4103f8b3e15bf77f5edb70daef115b9a77bcf55885
MD5 4a82832a6209cdc3a2447ab2de137542
SHA1 21f334bf90566e3a94a712b68f2cbc32746711d4
SHA512 6bceff4d3eba26a84029d09f6e403f3fc0c95a744f4d6bfde22accf480a724a0f38960d848a5255258a6a57d3ec9b384847acf167b485ff67f7161aac04300f0
SSDEEP 384:AGEs6MVKQq0DwRiGUaLYuAXLaMoy4m973uwYkv56YPewyy1Eiu8IuFd/9:AGEQKZ2wRiGUcY8TBsdvkdwyyvIs
MD5 SHA1 SHA512 SSDEEP

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsu38F4.tmp\nsDialogs.dll
Size 14KB
SHA256 47a1976b7736371b9b2e073ef0dd49db3bdbe604ec9ee77e50621e5f19d9ae7b
MD5 8b11196dc49c4df98c6f97457c97e590
SHA1 7ee6c21506ac68a1ecf36be5d632ee339311d51a
SHA512 4c77005b35f9c9c3cd64d5dba178f45ed250974848086e9da283d539add6aa70bb9ec44782f69f115ab87d1d1d723a63698f9b9db817710b52ab836a87e654b7
SSDEEP 192:RlWWck581HwPRLG/CocFR1w5nEYkv/RGl5Boi6+6SZSM3CU:mdk5SoRLG/CocFR62Ykv8l5Boi9XyU
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/3496-14-0x0000000000400000-0x0000000000486000-memory.dmp

Download

memory/3496-16-0x0000000074210000-0x000000007421C000-memory.dmp

Download

memory/3496-15-0x0000000074220000-0x000000007422F000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads