3fd157484c55d7b3871ed546865836985ec4995a38fae1b1719ceed6dfb5bb67

Analysis

max time kernel
124s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
19/06/2024, 21:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

jghdtv_setup.exe
Size

13.5MB
MD5

46eb15c6068f2cd47532d3573b832990
SHA1

73e241d24f6b7cb0c2492fdfc448287f45875670
SHA256

d999288dd836c32661e7fbce564f331b833caa2ae117449a671d168dd80212ad
SHA512

3ff5c11c18a65645032b97426de7d868c2f91b74247ab1f4f094833bf44d232ec61ba6071ca85e119ab7bc94e9e4f685f1e04573ed752ab9a0243364caef3217
SSDEEP

393216:kehlvQyCgSe/v85L1WTeXFeZNa8pGumCIwG2Wx:1hdQycsAMT5ZsmxTNGd

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
860	jghdtv_setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\jghdtv_setup.exe
"C:\Users\Admin\AppData\Local\Temp\jghdtv_setup.exe"
1⤵
- Loads dropped DLL
PID:860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3440,i,16710585221322798697,8586257254049248207,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:8
1⤵
PID:1128

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nslE2A1.tmp\InstallOptions.dll

Filesize
12KB

MD5
1d5c649dde35003a618b9679d5d71b92

SHA1
0409bbab3ab34f8c01289cdd847b4d1a32d05b18

SHA256
0f4d3cee24e3f310fa804983c931d3628613988a24f0be7854f63a9309b8e45f

SHA512
b432ebcc52905662d61a3f17e08e209a3f9d836a9071b3b5e80070af7ebcf34cf66c44426dda041c2a258fda4787e5692e2b35acbcd73288fb84fe3c977bbfd9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nslE2A1.tmp\ioSpecial.ini

Filesize
626B

MD5
821d3ef1915e23b23b3a31317b11c7fc

SHA1
3114ba36079b47db0a1233f83977583d5533b692

SHA256
e210a3ab35b813c51cd074025e6ebaf01450a8b27a4c9186c7350af0c54e12d6

SHA512
fa1c97aa1c946233e67496cfc9304b9d7289f10c818e61987b71b27a70de33f6b7ec2d224a0d5c411df0d6f79d0578567cfd7d216a078cdab4d671df3ec155c7

Download Submit