Analysis

  • max time kernel
    152s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    21-12-2021 11:54

General

  • Target

    1d69a55baba58f62b1448b92859a39272ba42d171f390749ca8ba9c27e74b010.bin.exe

  • Size

    67KB

  • MD5

    a2f1c7def6b73a5bbbdfea5c01482d87

  • SHA1

    68dda756a9b36df90c81329fb83fab2abac0656f

  • SHA256

    1d69a55baba58f62b1448b92859a39272ba42d171f390749ca8ba9c27e74b010

  • SHA512

    28bd3b3e5587215bf4b48df1ad5885e76c4bd128d6ea8f30f22008120384c1d2aaf2b73298842443469f5c6d9ebe5be32e2d648ade69876333b66e64309d13fb

Malware Config

Signatures

  • Windows security bypass 2 TTPs
  • Windows security modification 2 TTPs 7 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
  • Drops file in Windows directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1d69a55baba58f62b1448b92859a39272ba42d171f390749ca8ba9c27e74b010.bin.exe
    "C:\Users\Admin\AppData\Local\Temp\1d69a55baba58f62b1448b92859a39272ba42d171f390749ca8ba9c27e74b010.bin.exe"
    1⤵
    • Windows security modification
    • Adds Run key to start application
    • Drops file in Windows directory
    PID:1608

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1608-54-0x0000000076C61000-0x0000000076C63000-memory.dmp

    Filesize

    8KB