98598c90bd75b930aba968467f4b540a5784aa28612b8010d8a9cf31992843c6

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
15-06-2024 19:05

Target

DriverUpdate.exe
Size

1.5MB
MD5

1dbb3736d491a2f652d350f3d535eef4
SHA1

2affdf99938bc10d32fa116241941115e0437ce2
SHA256

98598c90bd75b930aba968467f4b540a5784aa28612b8010d8a9cf31992843c6
SHA512

3c4c2a8328ebda8b5f601590f06771ae84a6739e2571512c5ed822cb16bed12c8c848dd327ee8529ad6622b11ec37c1a3cf4983f16b945f0dc748cc612721bba
SSDEEP

24576:+szPBVF4oBvzz6ttMA+z/fUtqk+1Vw3ijU8LLsYk/ve3Na9TZn1TH/4+RC17W2ZZ:PpV7Nz8tN+zEwxA8Lsb/ve3m7f4+RClJ

Score

4^/10

Loads dropped DLL 2 IoCs

Processes:

DriverUpdate.exe

pid process

2084 DriverUpdate.exe
2084 DriverUpdate.exe
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

pid	process
2084	DriverUpdate.exe
2084	DriverUpdate.exe

C:\Users\Admin\AppData\Local\Temp\DriverUpdate.exe
"C:\Users\Admin\AppData\Local\Temp\DriverUpdate.exe"
1⤵
- Loads dropped DLL
PID:2084

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

\Users\Admin\AppData\Local\Temp\nsj75AF.tmp\System.dll

Filesize
11KB

MD5
55a26d7800446f1373056064c64c3ce8

SHA1
80256857e9a0a9c8897923b717f3435295a76002

SHA256
904fd5481d72f4e03b01a455f848dedd095d0fb17e33608e0d849f5196fb6ff8

SHA512
04b8ab7a85c26f188c0a06f524488d6f2ac2884bf107c860c82e94ae12c3859f825133d78338fd2b594dfc48f7dc9888ae76fee786c6252a5c77c88755128a5b

Download Submit
\Users\Admin\AppData\Local\Temp\nsj75AF.tmp\UserInfo.dll

Filesize
4KB

MD5
c051c86f6fa84ac87efb0cf3961950a1

SHA1
f18f4bb803099b80a3a013ecb03fea11cff0ac01

SHA256
d0949b4c0640ee6a80db5a7f6d93fc631ed194de197d79bf080ec1752c6f1166

SHA512
6e9de5d07aaed2ac297faa5049d567884d817ed94dece055d96913ac8e497ade6f0ff5c28bae7cc7d3ac41f8795efb9939e6d12061a3c446d5d2a3e2287d49d2

Download Submit