390ed1dde4ff03adfcf67c59ee02567ac5665bb5e029eaebf0332bc81e4d1891

Resubmissions

13-03-2023 15:08

19-04-2022 02:37

Target

390ed1dde4ff03adfcf67c59ee02567ac5665bb5e029eaebf0332bc81e4d1891.exe
Size

657KB
MD5

0d0823d9a5d000b80e27090754f59ee5
SHA1

b1f495b707ffaf53188c13f19a487dd94e7a0735
SHA256

390ed1dde4ff03adfcf67c59ee02567ac5665bb5e029eaebf0332bc81e4d1891
SHA512

52a4ae72e2685a6b6d274388b636fe63d96e5545475e521e9e250d56d4593657061502f00c6b90f5e54d05a63a9301509852804b9d705307c03f8fff739d3964

Score

1^/10

Enumerates system info in registry 2 TTPs 1 IoCs

Query Registry

System Information Discovery

Processes:

390ed1dde4ff03adfcf67c59ee02567ac5665bb5e029eaebf0332bc81e4d1891.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	390ed1dde4ff03adfcf67c59ee02567ac5665bb5e029eaebf0332bc81e4d1891.exe

C:\Users\Admin\AppData\Local\Temp\390ed1dde4ff03adfcf67c59ee02567ac5665bb5e029eaebf0332bc81e4d1891.exe
"C:\Users\Admin\AppData\Local\Temp\390ed1dde4ff03adfcf67c59ee02567ac5665bb5e029eaebf0332bc81e4d1891.exe"
1⤵
- Enumerates system info in registry
PID:4248

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/4248-130-0x0000000000400000-0x00000000004A7000-memory.dmp

Filesize
668KB

Download
memory/4248-131-0x0000000000400000-0x00000000004A7000-memory.dmp

Filesize
668KB

Download