ccb6a3fdba6f6be52e6e54a6b3c5f903eec3a5c87e424de5b632f8efaaf0e960

Analysis

max time kernel
36s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03/10/2022, 20:46

Target

ccb6a3fdba6f6be52e6e54a6b3c5f903eec3a5c87e424de5b632f8efaaf0e960.exe
Size

346KB
MD5

491035667d3b8c1034b136762f027bf5
SHA1

69424790dcc28fe7aabede94983d1f56f20954bd
SHA256

ccb6a3fdba6f6be52e6e54a6b3c5f903eec3a5c87e424de5b632f8efaaf0e960
SHA512

9ea756f64efde1c4d25d09ebe79980c91bbf0dfbabcacf5b81169b6ba6fd3559bf526ab881d21d8e1d96d688f71039905a2f3cf9db94126c156f677abc60f4c2
SSDEEP

6144:N0uKzYED2sSa6Ug7jxTr6bI+wXFItQX5Yydq6m68JpFUC8qZFE77:WuMYEqsCtWbcXvKyNd+pSC8q7E77

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\RecordMyRun.job	ccb6a3fdba6f6be52e6e54a6b3c5f903eec3a5c87e424de5b632f8efaaf0e960.exe

C:\Users\Admin\AppData\Local\Temp\ccb6a3fdba6f6be52e6e54a6b3c5f903eec3a5c87e424de5b632f8efaaf0e960.exe
"C:\Users\Admin\AppData\Local\Temp\ccb6a3fdba6f6be52e6e54a6b3c5f903eec3a5c87e424de5b632f8efaaf0e960.exe"
1⤵
- Drops file in Windows directory
PID:1708

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1708-54-0x0000000075451000-0x0000000075453000-memory.dmp

Filesize
8KB

Download
memory/1708-55-0x00000000002A0000-0x00000000002CF000-memory.dmp

Filesize
188KB

Download