318a7a145bbf739591429fa352cf62b465fe4e784e02b52c1f4edb63bc66ff6d

Analysis

max time kernel
148s
max time network
78s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-06-2022 22:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

318a7a145bbf739591429fa352cf62b465fe4e784e02b52c1f4edb63bc66ff6d.exe
Size

212KB
MD5

c4ded2bda86c82672411f1cf583c6650
SHA1

33823caa6d9ae590505cade75f9ad3db9776444a
SHA256

318a7a145bbf739591429fa352cf62b465fe4e784e02b52c1f4edb63bc66ff6d
SHA512

9cae99cb308891fa372c82267e2f3d4775bb15a7a6df9a9b5a73853fe5b218fe6fd03bd0cd3967e3fc480fa526ac1c1412e9fe16b9460f346735b56b297fadd9

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

Processes:

318a7a145bbf739591429fa352cf62b465fe4e784e02b52c1f4edb63bc66ff6d.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-3751123196-3323558407-1869646069-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\7FLZgKBlIHMSaH0B9k = "C:\\Users\\Admin\\Documents\\50CNOW4K1KfTeNZNll\\7FLZgKBlIHMSaH0B9k.exe"	318a7a145bbf739591429fa352cf62b465fe4e784e02b52c1f4edb63bc66ff6d.exe

C:\Users\Admin\AppData\Local\Temp\318a7a145bbf739591429fa352cf62b465fe4e784e02b52c1f4edb63bc66ff6d.exe
"C:\Users\Admin\AppData\Local\Temp\318a7a145bbf739591429fa352cf62b465fe4e784e02b52c1f4edb63bc66ff6d.exe"
1⤵
- Adds Run key to start application
PID:2428

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v6

Replay Monitor

Loading Replay Monitor...

Downloads