5f20af1d782468507417d0785826b1f064fadba88ed1691e2def269922ace56b

Analysis

max time kernel
140s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
20/07/2024, 23:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

lmms-1.2.2-win64.exe
Size

35.1MB
MD5

8a5e80d496c3052a2057098dcbb1293f
SHA1

f26b1be68206eaa0b36f1ee057bda45b45070a30
SHA256

5f20af1d782468507417d0785826b1f064fadba88ed1691e2def269922ace56b
SHA512

e99d92bec376c548c0b3f8569fa43414efe9fa3f24d43a23c281a526a5a4c94642ddd0103a369b5feebe0b63f00c2633925be7a22ed3ccd70ef7c599fb424351
SSDEEP

786432:fJNH9O9cqiO3Z3QBH9OiJJTtDUv2P2YG+O9aXNTqtuHkwloovV/6+:Rd9OT3Z3Qx9OoUvNY/O9eNT5EhMV/n

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
2660	lmms-1.2.2-win64.exe
2660	lmms-1.2.2-win64.exe
2660	lmms-1.2.2-win64.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\lmms-1.2.2-win64.exe
"C:\Users\Admin\AppData\Local\Temp\lmms-1.2.2-win64.exe"
1⤵
- Loads dropped DLL
PID:2660

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsrA2F8.tmp\InstallOptions.dll

Filesize
18KB

MD5
adec63bd08a185bffe6fda335d29df87

SHA1
23f37d31f3b1c07547ad4fa2747305a04ac09b54

SHA256
dbd0068d46077ee1ace4eaafc3312389c29af22d306c5757a1a29a93146604a9

SHA512
44bb32fa41b0c2b41d637f15dd2cab84ad6f9dae39febb263923eeee19d1c80d65ba3939ab87d34fbb28af6a6f867c21daab5810d289e309451c67ef6f65a88c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsrA2F8.tmp\UserInfo.dll

Filesize
6KB

MD5
7f780de67db61a924bebc0cafaded3ad

SHA1
3ac359dce08ceff16e4214fe45d83fdc8e3f2e1a

SHA256
9931a2f8bb44b92ff26062b99cbb6e41ed1cfad65079dec5d6d9c006223bd121

SHA512
8378f04b6f5085e887ed46874414e5681f0ecb6889dbaa25eb78f75112d4be603aef8dec6a2a81857a19978f6ccf07d65d566ff3f0943da809de22599ffdd8f2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsrA2F8.tmp\ioSpecial.ini

Filesize
727B

MD5
92f2f2b15a7923a0f9b8381f7d558cb1

SHA1
40513c3e48628d82cec0ba022a0d25a98cebfd31

SHA256
01f0adb5b05332323fbc2006547f861f5e21d6789ce1ec29bc81e151e55480cf

SHA512
04ed4815da7ab181c0dc58685ffc37876d400ee59c6ee0bc40bc7f76eb19f0e64686d2beee6279ebe6d97fdbf55502f2bb7db995283714df098d52acae62b8e6

Download Submit
memory/2660-87-0x0000000000400000-0x00000000004A1000-memory.dmp

Filesize
644KB

Download
memory/2660-88-0x000000006AF00000-0x000000006AF0D000-memory.dmp

Filesize
52KB

Download