86336bae7c841b26aca87ef9e88ec68ecd7d8b469ff328941df538ea342fc354

Analysis

max time kernel
151s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2022, 11:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

86336bae7c841b26aca87ef9e88ec68ecd7d8b469ff328941df538ea342fc354.exe
Size

1009KB
MD5

7bc4872cd8a2a26c2d2b50c52b2079a0
SHA1

70f69921319235ef531bd6ec0ea05360c6a23cbd
SHA256

86336bae7c841b26aca87ef9e88ec68ecd7d8b469ff328941df538ea342fc354
SHA512

aec5b2306e03aa71315479762797812edb46dc27ef629cf7bb608be9b13d6e41f994cae3d1d765a558b20fca5e1f0f38cebce6db1b4c740f7555fdc61e4c91c7
SSDEEP

24576:BIkRvzatHqu6VDFLlumjQpDMQecUwa/HPDW4C:mk9zatHq7VDFQD37GHPJ

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-929662420-1054238289-2961194603-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce	86336bae7c841b26aca87ef9e88ec68ecd7d8b469ff328941df538ea342fc354.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-929662420-1054238289-2961194603-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\86336bae7c841b26aca87ef9e88ec68ecd7d8b469ff328941df538ea342fc354 = "\"C:\\Users\\Admin\\AppData\\Local\\4761978982.exe\" 0 47 "	86336bae7c841b26aca87ef9e88ec68ecd7d8b469ff328941df538ea342fc354.exe

C:\Users\Admin\AppData\Local\Temp\86336bae7c841b26aca87ef9e88ec68ecd7d8b469ff328941df538ea342fc354.exe
"C:\Users\Admin\AppData\Local\Temp\86336bae7c841b26aca87ef9e88ec68ecd7d8b469ff328941df538ea342fc354.exe"
1⤵
- Adds Run key to start application
PID:4452

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4452-132-0x0000000000400000-0x0000000000837DCC-memory.dmp

Filesize
4.2MB

Download
memory/4452-133-0x000000000095B000-0x000000000095E000-memory.dmp

Filesize
12KB

Download
memory/4452-134-0x0000000000400000-0x0000000000837DCC-memory.dmp

Filesize
4.2MB

Download
memory/4452-135-0x000000000095B000-0x000000000095E000-memory.dmp

Filesize
12KB

Download