Analysis

  • max time kernel
    153s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/10/2022, 09:47

General

  • Target

    7e9159dcb8106bb29652e2bf4f03b0bd46e69a80544e8dfbdda27cbc2adf4a34.exe

  • Size

    76KB

  • MD5

    7a109e51b0ff3f9ff38e9d25bca724c6

  • SHA1

    045c0268f93305dd2105e2ee937d310201175e6f

  • SHA256

    7e9159dcb8106bb29652e2bf4f03b0bd46e69a80544e8dfbdda27cbc2adf4a34

  • SHA512

    79e0b436dce47c23da5e175bf5aa7d58abd5461063029fae1bf6cfe0c90e8f6849de31cbddc814b27fbb9189254853db63b32a0de35ca02a072158a8c062aea3

  • SSDEEP

    1536:Is+ri95pYGGr04mXQbpAFfdeBYYlfFkWGq6cjTA:IsQa5pY504mXQtUleBNldkWGqzjTA

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7e9159dcb8106bb29652e2bf4f03b0bd46e69a80544e8dfbdda27cbc2adf4a34.exe
    "C:\Users\Admin\AppData\Local\Temp\7e9159dcb8106bb29652e2bf4f03b0bd46e69a80544e8dfbdda27cbc2adf4a34.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:5000

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/5000-132-0x0000000000560000-0x0000000000565000-memory.dmp

          Filesize

          20KB

        • memory/5000-133-0x0000000000400000-0x0000000000410000-memory.dmp

          Filesize

          64KB

        • memory/5000-134-0x0000000000560000-0x0000000000565000-memory.dmp

          Filesize

          20KB