Analysis

  • max time kernel
    152s
  • max time network
    164s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    21-12-2021 11:54

General

  • Target

    8f7bbcb3ac44aa48df92b65b7ef40c341ed80df2710668d5ac6b7207c00b581d.bin.exe

  • Size

    67KB

  • MD5

    532dbd62612ff358ab0278de291144b4

  • SHA1

    4fe32693455f60d2abdbb5cbaa64b63896bdb43d

  • SHA256

    8f7bbcb3ac44aa48df92b65b7ef40c341ed80df2710668d5ac6b7207c00b581d

  • SHA512

    a9fe40eebafe15dcc12170f22a629a1f01c8a9fe3919ad111c53b9a04430a6855493948ef1ab430aa45ab3d98a13dcbe042fdc68b862726e5c969555c7811e05

Malware Config

Signatures

  • Windows security bypass 2 TTPs
  • Windows security modification 2 TTPs 7 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
  • Drops file in Windows directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8f7bbcb3ac44aa48df92b65b7ef40c341ed80df2710668d5ac6b7207c00b581d.bin.exe
    "C:\Users\Admin\AppData\Local\Temp\8f7bbcb3ac44aa48df92b65b7ef40c341ed80df2710668d5ac6b7207c00b581d.bin.exe"
    1⤵
    • Windows security modification
    • Adds Run key to start application
    • Drops file in Windows directory
    PID:1860

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1860-54-0x0000000075891000-0x0000000075893000-memory.dmp

    Filesize

    8KB