4f3673330e13cb434e8b01ff0d689c6a68c4bfd79d38f166086aeddea71d2f7d

Analysis

max time kernel
47s
max time network
53s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
11/10/2022, 13:26

Target

4f3673330e13cb434e8b01ff0d689c6a68c4bfd79d38f166086aeddea71d2f7d.exe
Size

246KB
MD5

40f0c338e06e8803d33f9c3fa6eaa59c
SHA1

0eb3e1894e9aee73dbf566a83ede67e7dcd76ee6
SHA256

4f3673330e13cb434e8b01ff0d689c6a68c4bfd79d38f166086aeddea71d2f7d
SHA512

1925ac71609fd959782e4e0f543c6b1f1f2c54bae46ffca1cc5ee90098bec3f70c9e71900cf00b5e313388629b24e653b6d91b53266b4d1a9fcc847e53003044
SSDEEP

3072:4EUqGaeR/0nEmusI+VEe4JQqVGluBTMatopPBjZc69aPtsRlUTTcytIF6rTp98yZ:WaeRMFuDI4JQDlfn9StMiTQoD8yZ

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\FastFix.job	4f3673330e13cb434e8b01ff0d689c6a68c4bfd79d38f166086aeddea71d2f7d.exe

C:\Users\Admin\AppData\Local\Temp\4f3673330e13cb434e8b01ff0d689c6a68c4bfd79d38f166086aeddea71d2f7d.exe
"C:\Users\Admin\AppData\Local\Temp\4f3673330e13cb434e8b01ff0d689c6a68c4bfd79d38f166086aeddea71d2f7d.exe"
1⤵
- Drops file in Windows directory
PID:1140

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1140-54-0x0000000075091000-0x0000000075093000-memory.dmp

Filesize
8KB

Download
memory/1140-55-0x0000000000240000-0x000000000026F000-memory.dmp

Filesize
188KB

Download