54e91de0bf56275a37719c8b18280ce96a381202988de6bf49cbaf7f7f2e1aae

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
13-07-2024 04:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

$PLUGINSDIR/InitInstall.exe
Size

56KB
MD5

b8cbf04dd7c7a1485ec3bcca8c882e5c
SHA1

e9152212600ee22bc7d44b95f044b14ed2689789
SHA256

4fbee97256b426542e0cfa1a6c8fa7640ebb8e657f4572e4a725b3dea75d5160
SHA512

7f60631ca6b993ce45ac57624f1cb6683b13f08c5ce05152d68f182203c0361378aeb7dd721f094efcd6d336a65a0ddcd52e33a9550dbbe61795c2eef511ef2c
SSDEEP

1536:GpgpHzb9dZVX9fHMvG0D3XJ4qcj9rjd1V/DOSUvKIc:sgXdZt9P6D3XJ4qENhDmvKR

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
2792	InitInstall.exe
2792	InitInstall.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\InitInstall.exe
"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\InitInstall.exe"
1⤵
- Loads dropped DLL
PID:2792

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\Temp\nsoD441.tmp\inetc.dll

Filesize
24KB

MD5
1efbbf5a54eb145a1a422046fd8dfb2c

SHA1
ec4efd0a95bb72fd4cf47423647e33e5a3fddf26

SHA256
983859570099b941c19d5eb9755eda19dd21f63e8ccad70f6e93f055c329d341

SHA512
7fdeba8c961f3507162eb59fb8b9b934812d449cc85c924f61722a099618d771fed91cfb3944e10479280b73648a9a5cbb23482d7b7f8bfb130f23e8fd6c15fb

Download Submit