d620778dbbcf11e3a293aeaaebac7b6a9a02e7d8790ca5ffa59bda1e9b9632f4 | Triage™

Analysis

max time kernel
70s
max time network
91s
platform
windows10_x64
resource
win10v200722
submitted
11/08/2020, 11:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file_to_save.exe
Size 285KB
Sample200811-77vtbwpkq2
SHA256 d620778dbbcf11e3a293aeaaebac7b6a9a02e7d8790ca5ffa59bda1e9b9632f4
MD5 d54d2a216e637bcd36e5217cfba98896
SHA1 41e846d00379083a988db6028890233b4d74e8f4
SHA512 b92fdfd0ec1cbbfc4145465b88efe75223fb4df2df1d77122527175d211db0d572449726dd9ea8579f7cb4c5dc9df467f5980cb7344b7e931e85a34207f500b3
MD5 SHA1 SHA512

Score

7^/10

discovery

Malware Config

Signatures

Drops startup file 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BooM.exe	file_to_save.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\file_to_save.exe
"C:\Users\Admin\AppData\Local\Temp\file_to_save.exe"
1⤵
- Drops startup file
PID:812

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads