563ab370cff3663565eb7a397fef04f23cda375264fe6939705522da9d43aa18 | Triage

Analysis

max time kernel
90s
max time network
81s
platform
windows7_x64
resource
win7-20220718-en
resource tags

arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
submitted
25-07-2022 04:48

Sharing

Report Analysis Logs

General

Target

563ab370cff3663565eb7a397fef04f23cda375264fe6939705522da9d43aa18.exe
Size

220KB
MD5

3af13273d61cdcd1a82232eefe91a2e5
SHA1

a77d90fb79c2d6b73c31bc3c308c2f171c22789d
SHA256

563ab370cff3663565eb7a397fef04f23cda375264fe6939705522da9d43aa18
SHA512

5fab81e7e21e296f2fc76f417a42471ecc8b3f32535230c5eb2185eb99e24fdf0a6887826abab8df42c1082d636ff892dafd9589fb4c0d9bac021cb70367e9d2

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Drops file in Windows directory 1 IoCs

Processes:

563ab370cff3663565eb7a397fef04f23cda375264fe6939705522da9d43aa18.exe

description ioc process

File created C:\Windows\Tasks\MotionFix.job 563ab370cff3663565eb7a397fef04f23cda375264fe6939705522da9d43aa18.exe

C:\Users\Admin\AppData\Local\Temp\563ab370cff3663565eb7a397fef04f23cda375264fe6939705522da9d43aa18.exe
"C:\Users\Admin\AppData\Local\Temp\563ab370cff3663565eb7a397fef04f23cda375264fe6939705522da9d43aa18.exe"
1⤵
- Drops file in Windows directory
PID:892

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/892-54-0x0000000075A11000-0x0000000075A13000-memory.dmp

Filesize
8KB

Download
memory/892-55-0x0000000000520000-0x000000000054F000-memory.dmp

Filesize
188KB

Download