86c1f0303bc1aaa7bd8a0f88767072e8d3acdca2178f3e2e8a891d3322aa2af1

Analysis

max time kernel
52s
max time network
60s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 13:45

Target

86c1f0303bc1aaa7bd8a0f88767072e8d3acdca2178f3e2e8a891d3322aa2af1.exe
Size

344KB
MD5

5c4d1ab23b7b28ceced9e605091f1020
SHA1

0596e2e5410ead874b7773f111eb575a7d980f32
SHA256

86c1f0303bc1aaa7bd8a0f88767072e8d3acdca2178f3e2e8a891d3322aa2af1
SHA512

572e7c03de3811ffe6dccc6f6d20fb13f207e1d94d62d0b6eaad8c31d64d7a6193415ca5f467417cc801209a6bb40e9d730c551a5a1c112c03757579db532e8f
SSDEEP

6144:Vb1uoZve5qOfcC9ARyXVaNhqsRdpvLARWX5At0qsWO:VfZvYcCewX8vdpH5m0qsWO

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\TechnoEffects.job	86c1f0303bc1aaa7bd8a0f88767072e8d3acdca2178f3e2e8a891d3322aa2af1.exe

C:\Users\Admin\AppData\Local\Temp\86c1f0303bc1aaa7bd8a0f88767072e8d3acdca2178f3e2e8a891d3322aa2af1.exe
"C:\Users\Admin\AppData\Local\Temp\86c1f0303bc1aaa7bd8a0f88767072e8d3acdca2178f3e2e8a891d3322aa2af1.exe"
1⤵
- Drops file in Windows directory
PID:1968

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1968-54-0x00000000764D1000-0x00000000764D3000-memory.dmp

Filesize
8KB

Download
memory/1968-55-0x00000000001D0000-0x00000000001FF000-memory.dmp

Filesize
188KB

Download