46f93ab82fdc83bad649766940e64396b70861e5c0a49bf679a3fe11c2cfb419

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
18/10/2022, 11:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

46f93ab82fdc83bad649766940e64396b70861e5c0a49bf679a3fe11c2cfb419.exe
Size

1.8MB
MD5

08e3c825c7c0d9bf5f366ca9e1083af6
SHA1

466e48112769af156972140073b414148aca9d57
SHA256

46f93ab82fdc83bad649766940e64396b70861e5c0a49bf679a3fe11c2cfb419
SHA512

d89ebb6df2f1c1870735188652c1a07dfc934235b7a67d1b22c3d417a94a131d374be7cc23ad4adfd8966dd68b16db5520ac77dd106496752e6dc20b9fcde4e2
SSDEEP

24576:2B58WgEU/HsIDzMGZFsWv1opBQ/J7j2RsB58WgEU/FsO0TMGZSWv1opJ:2B55OxF5v1opBa7csB551RPv1opJ

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-929662420-1054238289-2961194603-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MSNCore = "C:\\Users\\Admin\\AppData\\Local\\upNext.exe --i"	46f93ab82fdc83bad649766940e64396b70861e5c0a49bf679a3fe11c2cfb419.exe

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
1564	46f93ab82fdc83bad649766940e64396b70861e5c0a49bf679a3fe11c2cfb419.exe

C:\Users\Admin\AppData\Local\Temp\46f93ab82fdc83bad649766940e64396b70861e5c0a49bf679a3fe11c2cfb419.exe
"C:\Users\Admin\AppData\Local\Temp\46f93ab82fdc83bad649766940e64396b70861e5c0a49bf679a3fe11c2cfb419.exe"
1⤵
- Adds Run key to start application
- Suspicious behavior: RenamesItself
PID:1564

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...