4245b59eb49f9ea2596ed1791ea2c81173acbfdfa2ceaf8e17ab418ace71d847

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
22-06-2024 18:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

afkjourneysetup_912ebd41c98565070879877cdf1584c5.exe
Size

14.0MB
MD5

0bafbd90a6657ebc1d40339949a65d0b
SHA1

e072e153f9cd9279632d82d5c6a618a7c7f0e290
SHA256

4245b59eb49f9ea2596ed1791ea2c81173acbfdfa2ceaf8e17ab418ace71d847
SHA512

074433aa21c00282bdf517e8935dc279f4a67b6105b8c484eee2e320b979254d07deb0234160c0bc6a3c3df9f6ebc50e0a36353dc91a0379dad61f0ff2aebd01
SSDEEP

393216:wcWqAOa/J3K0GWkn+FL9mA2HtJrU3+OhPfAS:qFO+J3TGbuL9YJzOT

Score

4^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
1420	afkjourneysetup_912ebd41c98565070879877cdf1584c5.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\afkjourneysetup_912ebd41c98565070879877cdf1584c5.exe
"C:\Users\Admin\AppData\Local\Temp\afkjourneysetup_912ebd41c98565070879877cdf1584c5.exe"
1⤵
- Loads dropped DLL
PID:1420

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\Temp\nsy25EA.tmp\NsLauncher.dll

Filesize
7.3MB

MD5
e289f003033fb7d3d52ff9afccbd3677

SHA1
2083fb9828ecc87d3b274208be0e8b88ba37136c

SHA256
e243bcd7575fdff522a23d97a848f562a52d484cea06151642ec5e36773a1b87

SHA512
99b9ec5c405b86754dd48959643080b5dccca4231e3092c1be77a8e86c5dfc893122b7d04cb2a87e4c21ce900f7eace488d01494045381cb96055a96cadc7863

Download Submit