9b373db026aaa4bb12a1043562900db3b46e664e6a3d449fa6240abf289fc8f8

Analysis

max time kernel
50s
max time network
57s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11/10/2022, 13:02

Target

9b373db026aaa4bb12a1043562900db3b46e664e6a3d449fa6240abf289fc8f8.exe
Size

296KB
MD5

618d4fb97ecf57016d731e25e9fc337a
SHA1

944cf22616d9af294e0ac4130702b8bcc7470f1d
SHA256

9b373db026aaa4bb12a1043562900db3b46e664e6a3d449fa6240abf289fc8f8
SHA512

e505c847e6bd4dcdfdf427ab962897f81dcf42c6a1315b66b459fa9836aa071a659e61f868238d40f35853b272dbe5f6bf938b5dee9e839e4bbec5acde93eddd
SSDEEP

6144:wdQzmsts/uXfwtDWs6yROjUPPJV16sqeqwd5Hat9bv:ZDtstxgE6Hwfev

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\StyleChat.job	9b373db026aaa4bb12a1043562900db3b46e664e6a3d449fa6240abf289fc8f8.exe

C:\Users\Admin\AppData\Local\Temp\9b373db026aaa4bb12a1043562900db3b46e664e6a3d449fa6240abf289fc8f8.exe
"C:\Users\Admin\AppData\Local\Temp\9b373db026aaa4bb12a1043562900db3b46e664e6a3d449fa6240abf289fc8f8.exe"
1⤵
- Drops file in Windows directory
PID:1392

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1392-54-0x0000000075521000-0x0000000075523000-memory.dmp

Filesize
8KB

Download
memory/1392-55-0x0000000000290000-0x00000000002BF000-memory.dmp

Filesize
188KB

Download
memory/1392-59-0x0000000000160000-0x0000000000192000-memory.dmp

Filesize
200KB

Download
memory/1392-60-0x0000000000160000-0x0000000000192000-memory.dmp

Filesize
200KB

Download