Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    19-08-2024 15:25

General

  • Target

    $PLUGINSDIR/dlhelpdl.exe

  • Size

    126KB

  • MD5

    16292168010ec1b9e7bb9653cf2c0977

  • SHA1

    077f663aca0ef31c9783e5fc4e5ed7b4b314f82e

  • SHA256

    96a7e6417b653b6160e3ddc4302bee5a7d3e6b8f8b96b1c2a2e25245cbbbca7c

  • SHA512

    5bc94164aa9208587c9d08250c73868925ea763dc9c3d8f8f85ba8c805460728f3974122237a8fe4eafe8e3ad2996a3683d24635a959c19a2754d1b51912c83d

  • SSDEEP

    3072:sgXdZt9P6D3XJLLiZNhDmvKyOue3je2jv2qXSwakNhDL:se34k1DmvKy7eTeov2q1DL

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\dlhelpdl.exe
    "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\dlhelpdl.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:2548

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\nsyBA4B.tmp\inetc.dll

    Filesize

    24KB

    MD5

    1efbbf5a54eb145a1a422046fd8dfb2c

    SHA1

    ec4efd0a95bb72fd4cf47423647e33e5a3fddf26

    SHA256

    983859570099b941c19d5eb9755eda19dd21f63e8ccad70f6e93f055c329d341

    SHA512

    7fdeba8c961f3507162eb59fb8b9b934812d449cc85c924f61722a099618d771fed91cfb3944e10479280b73648a9a5cbb23482d7b7f8bfb130f23e8fd6c15fb

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.