b9304579acd05e53c9c88fa92d1e536c3d09c7903c48fdf5796755267526966d

Analysis

max time kernel
45s
max time network
74s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01/10/2022, 18:24

Target

b9304579acd05e53c9c88fa92d1e536c3d09c7903c48fdf5796755267526966d.exe
Size

282KB
MD5

765c104a2ac424177147abc27a9d4340
SHA1

16205fb88cbe9dd31fa75fb2af081632bc31ecda
SHA256

b9304579acd05e53c9c88fa92d1e536c3d09c7903c48fdf5796755267526966d
SHA512

b0ef0b3d3d0c6da261c3e97ed44031c62c58e9d35b3f86933e39e741d3748c71cb26733589409181499462a1bd5486da167623d02292887e6cc4bd158e95ac1e
SSDEEP

3072:ow3Qxx7/ivTiG4mWAwLcvqEJkCKSLEuZsQZZfJGKArn1ZP3tPbe+u8SD:la7K75WAwkdzvhqDv5ZZSD

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\Bidaily Synchronize Task[973b].job	b9304579acd05e53c9c88fa92d1e536c3d09c7903c48fdf5796755267526966d.exe

C:\Users\Admin\AppData\Local\Temp\b9304579acd05e53c9c88fa92d1e536c3d09c7903c48fdf5796755267526966d.exe
"C:\Users\Admin\AppData\Local\Temp\b9304579acd05e53c9c88fa92d1e536c3d09c7903c48fdf5796755267526966d.exe"
1⤵
- Drops file in Windows directory
PID:688

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/688-54-0x0000000074D61000-0x0000000074D63000-memory.dmp

Filesize
8KB

Download
memory/688-55-0x0000000000110000-0x000000000013F000-memory.dmp

Filesize
188KB

Download