Overview

overview

10

Static

static

5736ed3148...76.exe

windows7-x64

6

5736ed3148...76.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    41s
  • max time network
    43s
  • platform
    windows7_x64
  • resource
    win7-20220715-en
  • resource tags

    arch:x64arch:x86image:win7-20220715-enlocale:en-usos:windows7-x64system
  • submitted
    25-07-2022 00:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5736ed3148f3e7bac463c2274715aea97c9d9a298e53465ff7a3d775d92cbc76.exe

  • Size

    2.0MB

  • MD5

    7c0d516ad62d7b6335050043818417c4

  • SHA1

    1016bbe6082b3ec155ba1f074a5bc4a9c8ebd1cc

  • SHA256

    5736ed3148f3e7bac463c2274715aea97c9d9a298e53465ff7a3d775d92cbc76

  • SHA512

    60f26be6cefb8eff1db3a266d11386e7fcecf673435ef2f274a5e56438d5723bd39f8809699e92d199a2cca397cd2f8a9f41c3d19362c7145e20cc242e11684a

Score
6/10
discovery

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5736ed3148f3e7bac463c2274715aea97c9d9a298e53465ff7a3d775d92cbc76.exe
    "C:\Users\Admin\AppData\Local\Temp\5736ed3148f3e7bac463c2274715aea97c9d9a298e53465ff7a3d775d92cbc76.exe"
    1⤵
    • Drops file in Windows directory
    PID:1464

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1464-54-0x0000000075021000-0x0000000075023000-memory.dmp
    Filesize

    8KB

    Download
  • memory/1464-55-0x0000000000290000-0x00000000002BF000-memory.dmp
    Filesize

    188KB

    Download