dcd7f9c7f568c20b028219b760f96da59af31946e9d2ed45b1367bedbd4e79f9

Analysis

max time kernel
37s
max time network
66s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01-10-2022 18:22

Target

dcd7f9c7f568c20b028219b760f96da59af31946e9d2ed45b1367bedbd4e79f9.exe
Size

346KB
MD5

62b494a41cd0ec6a79672a642f0067cc
SHA1

d69cd36431eb35071de5d8f83c0152b82c77350b
SHA256

dcd7f9c7f568c20b028219b760f96da59af31946e9d2ed45b1367bedbd4e79f9
SHA512

549ab2526a3e81472bca011cedf7807a729b67c34a0ae879849ea5e812d7c8e75b17cce4e858ced03268fb3af351b55a5543d9f64ef082324572dedaf34c4057
SSDEEP

6144:Qt8fJxABwCoIJnRW0VHdgebRA+PIspe2ZkuXqV3Fj589f:Qt8fJxSw18VDIb2WOCg9f

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\ContentDealer.job	dcd7f9c7f568c20b028219b760f96da59af31946e9d2ed45b1367bedbd4e79f9.exe

C:\Users\Admin\AppData\Local\Temp\dcd7f9c7f568c20b028219b760f96da59af31946e9d2ed45b1367bedbd4e79f9.exe
"C:\Users\Admin\AppData\Local\Temp\dcd7f9c7f568c20b028219b760f96da59af31946e9d2ed45b1367bedbd4e79f9.exe"
1⤵
- Drops file in Windows directory
PID:1744

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1744-54-0x0000000076DC1000-0x0000000076DC3000-memory.dmp

Filesize
8KB

Download
memory/1744-55-0x0000000000290000-0x00000000002BF000-memory.dmp

Filesize
188KB

Download