e695e095bb9622b0dbdb850864917b495f999fa328fa8991277315d409d0348d

Analysis

max time kernel
145s
max time network
154s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
02-10-2022 20:35

Target

e695e095bb9622b0dbdb850864917b495f999fa328fa8991277315d409d0348d.exe
Size

296KB
MD5

77b5d84575ddbb64695637181f160e8a
SHA1

0ef89d31b99c7a7f69f3b7defeeb6c21f7d0fd61
SHA256

e695e095bb9622b0dbdb850864917b495f999fa328fa8991277315d409d0348d
SHA512

08ebff6c0f8b8299cd4e82fdcaf81d7065c47f8d418f89f499ea825f6dabc7d0138ef1acb5d363bfc515aeda27b7b2f156a072fb238a128f43c4fd4b1ef9de61
SSDEEP

6144:I0rfirplkK/RZaqKg0tBGA3dG2PTfd1jH:I0Ti8K/X4tFlPzjjH

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\MediaCenterPro.job	e695e095bb9622b0dbdb850864917b495f999fa328fa8991277315d409d0348d.exe

C:\Users\Admin\AppData\Local\Temp\e695e095bb9622b0dbdb850864917b495f999fa328fa8991277315d409d0348d.exe
"C:\Users\Admin\AppData\Local\Temp\e695e095bb9622b0dbdb850864917b495f999fa328fa8991277315d409d0348d.exe"
1⤵
- Drops file in Windows directory
PID:1096

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1096-54-0x00000000768A1000-0x00000000768A3000-memory.dmp

Filesize
8KB

Download
memory/1096-55-0x0000000000200000-0x000000000022F000-memory.dmp

Filesize
188KB

Download
memory/1096-59-0x0000000000160000-0x0000000000192000-memory.dmp

Filesize
200KB

Download
memory/1096-60-0x0000000000160000-0x0000000000192000-memory.dmp

Filesize
200KB

Download