5b4e091f4ff55c2d426ca3ab68714562387fb615b820bb32dd696a150f3330cd

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
11-07-2024 08:11

Target

5b4e091f4ff55c2d426ca3ab68714562387fb615b820bb32dd696a150f3330cd.exe
Size

54.8MB
MD5

6a341a3120a8e9140076e7f07a14ac00
SHA1

93c3ef60132b89cecd1418efbfc396c7ea6ed513
SHA256

5b4e091f4ff55c2d426ca3ab68714562387fb615b820bb32dd696a150f3330cd
SHA512

e19de3685d2bd55ed67bf35044889eed56b0e02ae408d834df13b72d59b345162166bdc8348f4c01c7d850c14cc1b0b771cf5f92bb3ecd4adef427d860a93a48
SSDEEP

1572864:N4kqcnVXU29JlWMOVqvvIw7ZbN7vF6P0EVAWZZLdwa:bnVXV/lW3Vq3Ikf7vF9Bi9Sa

Score

4^/10

Loads dropped DLL 2 IoCs

Processes:

5b4e091f4ff55c2d426ca3ab68714562387fb615b820bb32dd696a150f3330cd.exe

pid	process
1924	5b4e091f4ff55c2d426ca3ab68714562387fb615b820bb32dd696a150f3330cd.exe
1924	5b4e091f4ff55c2d426ca3ab68714562387fb615b820bb32dd696a150f3330cd.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\5b4e091f4ff55c2d426ca3ab68714562387fb615b820bb32dd696a150f3330cd.exe
"C:\Users\Admin\AppData\Local\Temp\5b4e091f4ff55c2d426ca3ab68714562387fb615b820bb32dd696a150f3330cd.exe"
1⤵
- Loads dropped DLL
PID:1924

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsz9E27.tmp\System.dll

Filesize
11KB

MD5
fccff8cb7a1067e23fd2e2b63971a8e1

SHA1
30e2a9e137c1223a78a0f7b0bf96a1c361976d91

SHA256
6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e

SHA512
f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz9E27.tmp\nsDialogs.dll

Filesize
9KB

MD5
1c8b2b40c642e8b5a5b3ff102796fb37

SHA1
3245f55afac50f775eb53fd6d14abb7fe523393d

SHA256
8780095aa2f49725388cddf00d79a74e85c9c4863b366f55c39c606a5fb8440c

SHA512
4ff2dc83f640933162ec8818bb1bf3b3be1183264750946a3d949d2e7068ee606277b6c840193ef2b4663952387f07f6ab12c84c4a11cae9a8de7bd4e7971c57

Download Submit