Analysis

  • max time kernel
    47s
  • max time network
    53s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2022, 13:26

General

  • Target

    4f3673330e13cb434e8b01ff0d689c6a68c4bfd79d38f166086aeddea71d2f7d.exe

  • Size

    246KB

  • MD5

    40f0c338e06e8803d33f9c3fa6eaa59c

  • SHA1

    0eb3e1894e9aee73dbf566a83ede67e7dcd76ee6

  • SHA256

    4f3673330e13cb434e8b01ff0d689c6a68c4bfd79d38f166086aeddea71d2f7d

  • SHA512

    1925ac71609fd959782e4e0f543c6b1f1f2c54bae46ffca1cc5ee90098bec3f70c9e71900cf00b5e313388629b24e653b6d91b53266b4d1a9fcc847e53003044

  • SSDEEP

    3072:4EUqGaeR/0nEmusI+VEe4JQqVGluBTMatopPBjZc69aPtsRlUTTcytIF6rTp98yZ:WaeRMFuDI4JQDlfn9StMiTQoD8yZ

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4f3673330e13cb434e8b01ff0d689c6a68c4bfd79d38f166086aeddea71d2f7d.exe
    "C:\Users\Admin\AppData\Local\Temp\4f3673330e13cb434e8b01ff0d689c6a68c4bfd79d38f166086aeddea71d2f7d.exe"
    1⤵
    • Drops file in Windows directory
    PID:1140

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1140-54-0x0000000075091000-0x0000000075093000-memory.dmp

    Filesize

    8KB

  • memory/1140-55-0x0000000000240000-0x000000000026F000-memory.dmp

    Filesize

    188KB