75c22ed7fb622686edf496f884d2085aa50e2dc4739f4be667a36df878ed0bd1

Analysis

max time kernel
38s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03/10/2022, 21:00

Target

75c22ed7fb622686edf496f884d2085aa50e2dc4739f4be667a36df878ed0bd1.exe
Size

217KB
MD5

5b2e132bfc637745d3bd7d52b8a26f60
SHA1

4b91365e851df530fdf40e313bd9faf5c0d5f0b3
SHA256

75c22ed7fb622686edf496f884d2085aa50e2dc4739f4be667a36df878ed0bd1
SHA512

bb298208d265ca737d9fe4f800f22aa761c362ab700de76d3946cecc995829896ea277969c1e7d32c7bc46af1d23f0c156e00b7045b7de4280486c02f24873dd
SSDEEP

6144:XGgOf8Rzd526KgaIATr/cto+Zgmo4mKmxCs5igU8:CO+gaIAT4HZ/gKm4sRU8

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\InstantFame.job	75c22ed7fb622686edf496f884d2085aa50e2dc4739f4be667a36df878ed0bd1.exe

C:\Users\Admin\AppData\Local\Temp\75c22ed7fb622686edf496f884d2085aa50e2dc4739f4be667a36df878ed0bd1.exe
"C:\Users\Admin\AppData\Local\Temp\75c22ed7fb622686edf496f884d2085aa50e2dc4739f4be667a36df878ed0bd1.exe"
1⤵
- Drops file in Windows directory
PID:1880

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1880-54-0x0000000075201000-0x0000000075203000-memory.dmp

Filesize
8KB

Download
memory/1880-55-0x0000000000190000-0x00000000001BF000-memory.dmp

Filesize
188KB

Download