ff4bacc28cf6eb2e123bb9ef5fc818ace9f83c3c398d2d9ab78b80c224cdb7ba

Analysis

max time kernel
92s
max time network
99s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12/07/2024, 23:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

underversebattles.exe
Size

232.1MB
MD5

8f1b45fafe36e57782652523a563764f
SHA1

333d05376080eddc22aed18cc4fe20587e113127
SHA256

ff4bacc28cf6eb2e123bb9ef5fc818ace9f83c3c398d2d9ab78b80c224cdb7ba
SHA512

1cd0f0f5fdaaf3821063def6c724cb020bb0f27bf6ff71076618599c8dd58277f28a4e2a48b90aae753582b0c0828a0808f62e50f4d66a48669ae79adba9553b
SSDEEP

6291456:bGoPivGw61yf3wP4R2YJuclwDkAROad0+P7CwHcHC2:bbAwP40YJuclwgAROQ7e8cHC2

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
1916	underversebattles.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\underversebattles.exe
"C:\Users\Admin\AppData\Local\Temp\underversebattles.exe"
1⤵
- Loads dropped DLL
PID:1916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsg94CF.tmp\InstallOptions.dll

Filesize
15KB

MD5
6f3098fb5f3db26f3bb84f5481109e39

SHA1
9270793e404cc42c6f5be1eb1eb4305f166c656d

SHA256
f90a0893c0b0ce2ae3f8bb65f383bf656ce33381d6cbac2b25a7d82b34fde9bd

SHA512
0462beae0fbd882dc0b6a09547a7959c051928b828e28125b433794de0258f90f3dec8f1920290f114970d2540a113224b8ab372fcee4dfe87f139be4ac0c0d1

Download Submit