7d7ee0e33727d9db6fe70aaf56f3e4ecea1a7a01e4880586384e25ab07e3927d

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
08/07/2024, 16:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

$_60_/$_53_.exe
Size

223KB
MD5

9a454152a45bf27b34227d0b39718733
SHA1

364587690a3a641d7a126e4e5cc8b973c7b8a44c
SHA256

d178e5558a5dfa78d1031ca2841feb925fea52f32c61e9787c3f9f9e5056b5b8
SHA512

263c0144c5deb480748bb56b41b5b7053bd2c61579f09b8d69bb9f2fd714dba3fc84c9709656df35db229b6cc35a316b1b9e07431fc1bab57736dea423b94e8d
SSDEEP

3072:juszWOITsEL50jl7ylMmRxnFm9y7uiR80ogveIlKdP5ilMn4PsWV:RzZZRe5Fm9y7lRi0eId21WV

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2872	$_53_.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\$_60_\$_53_.exe
"C:\Users\Admin\AppData\Local\Temp\$_60_\$_53_.exe"
1⤵
- Loads dropped DLL
PID:2872

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\Temp\nsoFC79.tmp\System.dll

Filesize
11KB

MD5
959ea64598b9a3e494c00e8fa793be7e

SHA1
40f284a3b92c2f04b1038def79579d4b3d066ee0

SHA256
03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b

SHA512
5e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64

Download Submit