604943ffeae818c064d8da3e9d9a651f2b04d15137a4fdfeffc2486dc1752e25 | Triage

Analysis

max time kernel
93s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
04-10-2024 19:21

Sharing

Report Analysis Logs

General

Target

$PLUGINSDIR/installer.exe
Size

207KB
MD5

de8e9cb3a534359f5809b9c5980ce365
SHA1

34def3bd6d46a97daa546671513733b9a94c1e8a
SHA256

653db07daeedb23437e723f00ab4f7320e5bb6e6689e38e54896ee44d84cfc71
SHA512

dffe030837a4babfb06419ffd893f54b9856e0f1aafb320e923a7a4aea894154207b0f2998fd0ecaaf0105c6ff1bed95d93a8ae2f531e1c8c3aca248a35b1fe2
SSDEEP

6144:+RrKVYBooo1v0eB24qUxG1DJpqC+D6RwpKJ/eGRKP:+hKyov1ceE4rxG1DJpqkwpKJ/eGRK

Score

6^/10

Malware Config

Signatures

Drops desktop.ini file(s) 2 IoCs

description	ioc	Process
File created	C:\Windows\assembly\Desktop.ini	installer.exe
File opened for modification	C:\Windows\assembly\Desktop.ini	installer.exe

Drops file in Windows directory 3 IoCs

description	ioc	Process
File opened for modification	C:\Windows\assembly	installer.exe
File created	C:\Windows\assembly\Desktop.ini	installer.exe
File opened for modification	C:\Windows\assembly\Desktop.ini	installer.exe

C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\installer.exe
"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\installer.exe"
1⤵
- Drops desktop.ini file(s)
- Drops file in Windows directory
PID:3444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3444-0-0x00007FFE9E745000-0x00007FFE9E746000-memory.dmp

Filesize
4KB

Download
memory/3444-1-0x00007FFE9E490000-0x00007FFE9EE31000-memory.dmp

Filesize
9.6MB

Download
memory/3444-2-0x000000001BF00000-0x000000001BF28000-memory.dmp

Filesize
160KB

Download
memory/3444-6-0x00007FFE9E490000-0x00007FFE9EE31000-memory.dmp

Filesize
9.6MB

Download