8f88c3504594939be22f1c4db2894e4bddb7585428ab81069345f4ed6ce5b802

Analysis

max time kernel
44s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
11-10-2022 13:26

Target

8f88c3504594939be22f1c4db2894e4bddb7585428ab81069345f4ed6ce5b802.exe
Size

1.3MB
MD5

6507f36b1e9f007c60e3300899e216b0
SHA1

5aa11403950e4b2b3d946ff8a79336a69227bc2d
SHA256

8f88c3504594939be22f1c4db2894e4bddb7585428ab81069345f4ed6ce5b802
SHA512

e2d34bf6332deac34c9844e328aa9be1965c9faef160aee6f3e7ccb9ea97118e9d6ecdc2e6dca212fbafc9602e04aae6b60a754a77e7bb1b8994bc4120b41449
SSDEEP

6144:hY0OVvYXqGHfdicJ2aG09wQZ2nI159Xomv3Uxf2eX:z6G/gcdM+2iTomv8+G

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\Bidaily Synchronize Task[973b].job	8f88c3504594939be22f1c4db2894e4bddb7585428ab81069345f4ed6ce5b802.exe

C:\Users\Admin\AppData\Local\Temp\8f88c3504594939be22f1c4db2894e4bddb7585428ab81069345f4ed6ce5b802.exe
"C:\Users\Admin\AppData\Local\Temp\8f88c3504594939be22f1c4db2894e4bddb7585428ab81069345f4ed6ce5b802.exe"
1⤵
- Drops file in Windows directory
PID:1724

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1724-54-0x0000000074B51000-0x0000000074B53000-memory.dmp

Filesize
8KB

Download
memory/1724-55-0x0000000000190000-0x00000000001BF000-memory.dmp

Filesize
188KB

Download