5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8 | Triage

Analysis

max time kernel
53s
max time network
54s
platform
windows7_x64
resource
win7-20220718-en
resource tags

arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
submitted
25-07-2022 03:13

Sharing

Report Analysis Logs

General

Target

5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8.exe
Size

309KB
MD5

396a50aafb8a0a6f6f2e3ab7a984f0e5
SHA1

b060879f5b4874995359325e89744b8407c7ee8d
SHA256

5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8
SHA512

835aded12c884f2629ce910a76aea176410eb2d0404ed73d4b22f959affb3cbca10881ff7f036094ecdf7a1c3ac587b9475fd1c2f03c058f4abc02b52fb55823

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Drops file in Windows directory 1 IoCs

Processes:

5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8.exe

description ioc process

File created C:\Windows\Tasks\Scientifix.job 5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8.exe

C:\Users\Admin\AppData\Local\Temp\5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8.exe
"C:\Users\Admin\AppData\Local\Temp\5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8.exe"
1⤵
- Drops file in Windows directory
PID:1956

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1956-54-0x00000000756B1000-0x00000000756B3000-memory.dmp

Filesize
8KB

Download
memory/1956-55-0x00000000002A0000-0x00000000002CF000-memory.dmp

Filesize
188KB

Download