07a4eed7fba7790120b5b9ee12cd3599fb10abe2f03a1c95b9fccf3bbde9b3d7

Analysis

max time kernel
10s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03/10/2022, 11:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

07a4eed7fba7790120b5b9ee12cd3599fb10abe2f03a1c95b9fccf3bbde9b3d7.exe
Size

174KB
MD5

63537daf19ea551677095082578410e0
SHA1

664a66dd38ab9ad5b9e5504fe9c3339d6a4c9209
SHA256

07a4eed7fba7790120b5b9ee12cd3599fb10abe2f03a1c95b9fccf3bbde9b3d7
SHA512

afc636dbda695c79daf16743db1fdc36184f89e459006f6922dad61a8c16b1e68bbf7c0b398894f208d9bc4d9e94d9b6b8ac77612b2488b6b6ad88e3b81dadf3
SSDEEP

3072:p6QMowIg+1IvM//0Q2Q7sXqs1JYTsgdZFyWorG4EJGHn+U+Njg8TPB7JeJEi:puC0QMdeiW4GHSn/wnTP5wJR

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\svchost = "C:\\Users\\Admin\\AppData\\Local\\Temp\\07a4eed7fba7790120b5b9ee12cd3599fb10abe2f03a1c95b9fccf3bbde9b3d7.exe"	07a4eed7fba7790120b5b9ee12cd3599fb10abe2f03a1c95b9fccf3bbde9b3d7.exe

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File created	C:\Program Files\360\360Safe\SB360.exe	07a4eed7fba7790120b5b9ee12cd3599fb10abe2f03a1c95b9fccf3bbde9b3d7.exe

C:\Users\Admin\AppData\Local\Temp\07a4eed7fba7790120b5b9ee12cd3599fb10abe2f03a1c95b9fccf3bbde9b3d7.exe
"C:\Users\Admin\AppData\Local\Temp\07a4eed7fba7790120b5b9ee12cd3599fb10abe2f03a1c95b9fccf3bbde9b3d7.exe"
1⤵
- Adds Run key to start application
- Drops file in Program Files directory
PID:1432

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads