Analysis
- max time kernel
141s - max time network
98s - platform
windows10-2004_x64 - resource
win10v2004-20240704-en - resource tags
- submitted
05/07/2024, 07:14
General
- Target PL2303_Prolific_DriverInstaller_v110.exe
- Size 3.0MB
- Sample240705-h2m98axape
- SHA256 3c80fd894036f549fb831d271595df775ebaba7d98fdeea579bfae3c9d42ec53
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 8 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PL2303_Prolific_DriverInstaller_v110.exe"C:\Users\Admin\AppData\Local\Temp\PL2303_Prolific_DriverInstaller_v110.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\{1D1DFC4B-237F-4278-ADD7-9B12F831952D}\ISBEW64.exeC:\Users\Admin\AppData\Local\Temp\{1D1DFC4B-237F-4278-ADD7-9B12F831952D}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{6432BAC0-70DF-4E8E-9EC7-342165AC254E}2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
ISBEW64.exe
DIFxData.ini
FontData.ini
_IsRes.dll
isrt.dll
setup.inx
ISSetup.dll
_Setup.dll
setup.ini
memory/5084-95-0x0000000004F90000-0x0000000005017000-memory.dmp
memory/5084-97-0x0000000002750000-0x00000000028E1000-memory.dmp
memory/5084-29-0x0000000000590000-0x0000000000592000-memory.dmp
memory/5084-107-0x0000000005140000-0x00000000051CF000-memory.dmp
memory/5084-108-0x0000000002750000-0x00000000028E1000-memory.dmp
memory/5084-30-0x00000000028DF000-0x00000000028E0000-memory.dmp
memory/5084-25-0x0000000002750000-0x00000000028E1000-memory.dmp
memory/5084-128-0x0000000002750000-0x00000000028E1000-memory.dmp
memory/5084-129-0x0000000004F90000-0x0000000005017000-memory.dmp