752d430aea3dbc50274c7ed2ca18a99e49313bc61d07540b222006e848461511

Analysis

max time kernel
44s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
04/10/2022, 01:50

Target

752d430aea3dbc50274c7ed2ca18a99e49313bc61d07540b222006e848461511.exe
Size

295KB
MD5

207f14cb5db3fbfdb2639065b0c0e2f0
SHA1

020e65e0bae2679e728bc56fa0c47baf63f0bb87
SHA256

752d430aea3dbc50274c7ed2ca18a99e49313bc61d07540b222006e848461511
SHA512

f68eb3774f238540efc00108f7622159dafcf8e527ee14ee66a8dc90463fa2711ce8559b4245c942395e29991a69b3a8f415982e1b2c0d0282d0dce2a9bb17bd
SSDEEP

6144:YnxuHa4pOtYDsTrIe2srRaZGIB9Ka+LIYgvJv:YYz4aDs3i6I9BeIDvJv

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\FlavorFavors.job	752d430aea3dbc50274c7ed2ca18a99e49313bc61d07540b222006e848461511.exe

C:\Users\Admin\AppData\Local\Temp\752d430aea3dbc50274c7ed2ca18a99e49313bc61d07540b222006e848461511.exe
"C:\Users\Admin\AppData\Local\Temp\752d430aea3dbc50274c7ed2ca18a99e49313bc61d07540b222006e848461511.exe"
1⤵
- Drops file in Windows directory
PID:1724

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1724-54-0x0000000074B51000-0x0000000074B53000-memory.dmp

Filesize
8KB

Download
memory/1724-55-0x00000000000F0000-0x000000000011F000-memory.dmp

Filesize
188KB

Download
memory/1724-59-0x00000000014A1000-0x00000000014C2000-memory.dmp

Filesize
132KB

Download