a0efead883cc89ccaa6c5337ee8d2ce0115b8f19d75261421015a6ab43f02cc2

Analysis

max time kernel
32s
max time network
61s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01-10-2022 19:02

Target

a0efead883cc89ccaa6c5337ee8d2ce0115b8f19d75261421015a6ab43f02cc2.exe
Size

217KB
MD5

728bb6a983d130822f01de091bfbb9a0
SHA1

5a2b8bece6d1a6436c6ff6f80b9d39ebab2f883d
SHA256

a0efead883cc89ccaa6c5337ee8d2ce0115b8f19d75261421015a6ab43f02cc2
SHA512

a432730cddb763a201aa8610f3bc3a4c0fae207b93e0bacf178c073e47a8744b74e9bd5875a8b0f0404577d675571a74a710dec33955b6549e86fd33c10cc236
SSDEEP

6144:WfJV0jVjehv0eEPzAg54KdeVlhd591GRGJ1htSc:pZY2H59K/6O1hgc

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\TimeSketch.job	a0efead883cc89ccaa6c5337ee8d2ce0115b8f19d75261421015a6ab43f02cc2.exe

C:\Users\Admin\AppData\Local\Temp\a0efead883cc89ccaa6c5337ee8d2ce0115b8f19d75261421015a6ab43f02cc2.exe
"C:\Users\Admin\AppData\Local\Temp\a0efead883cc89ccaa6c5337ee8d2ce0115b8f19d75261421015a6ab43f02cc2.exe"
1⤵
- Drops file in Windows directory
PID:2000

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/2000-54-0x00000000763F1000-0x00000000763F3000-memory.dmp

Filesize
8KB

Download
memory/2000-55-0x0000000000150000-0x000000000017F000-memory.dmp

Filesize
188KB

Download