ea4ad7d0bf2c57b88fee98039f369b833d6bf2a12aa645bf78567fa796c4dca7

Analysis

max time kernel
43s
max time network
48s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11/10/2022, 13:14

Target

ea4ad7d0bf2c57b88fee98039f369b833d6bf2a12aa645bf78567fa796c4dca7.exe
Size

337KB
MD5

1da98c245d033fc524ea0c4a8908b921
SHA1

55bccb8955b08547e10c9342edf47c4254f547b1
SHA256

ea4ad7d0bf2c57b88fee98039f369b833d6bf2a12aa645bf78567fa796c4dca7
SHA512

01397df33278d282150afcc47937773444aadab06414bca568ce71de57cc1d74e01cbb2d22f37bc11e3aa97e0dde97c74931d7fa2be9ccca3fb3e7de8468b0cf
SSDEEP

6144:JBUY91uuEWsti1MiLNBppYZqpAA63Er2QeU1a3e8K6rDKK6:MYmuEhDix9fC4SQeU1Me8PrDKK6

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\Best DJPro.job	ea4ad7d0bf2c57b88fee98039f369b833d6bf2a12aa645bf78567fa796c4dca7.exe

C:\Users\Admin\AppData\Local\Temp\ea4ad7d0bf2c57b88fee98039f369b833d6bf2a12aa645bf78567fa796c4dca7.exe
"C:\Users\Admin\AppData\Local\Temp\ea4ad7d0bf2c57b88fee98039f369b833d6bf2a12aa645bf78567fa796c4dca7.exe"
1⤵
- Drops file in Windows directory
PID:1812

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1812-54-0x0000000076411000-0x0000000076413000-memory.dmp

Filesize
8KB

Download
memory/1812-55-0x00000000003B0000-0x00000000003DF000-memory.dmp

Filesize
188KB

Download