48d67c8d66aa6c9700446f392d1d5f5b0af3a3b0f333c368daf3dd9e3a7e9a51

Analysis

max time kernel
56s
max time network
68s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 13:47

Target

48d67c8d66aa6c9700446f392d1d5f5b0af3a3b0f333c368daf3dd9e3a7e9a51.exe
Size

347KB
MD5

80dbcaff0d3fb9932df01bbd943bb042
SHA1

58235bd51cd16836a2115be7f55647f299a14aff
SHA256

48d67c8d66aa6c9700446f392d1d5f5b0af3a3b0f333c368daf3dd9e3a7e9a51
SHA512

fbf499cd78c8652d4c544ba0d081d906d5ccd07929abb3ed7b1b12ab7bec86377836a9b17af9d6bb1f4a19176ea259f9a7c09b6a631a058c1375225db3b6c710
SSDEEP

6144:vY91uuEWshy6ciLNBppYZqpAA63Er2QeU1a3e8K6PwwkMdKU/VWcj6:vYmuEaix9fC4SQeU1Me8B3kM7tWcj6

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\Soundster.job	48d67c8d66aa6c9700446f392d1d5f5b0af3a3b0f333c368daf3dd9e3a7e9a51.exe

C:\Users\Admin\AppData\Local\Temp\48d67c8d66aa6c9700446f392d1d5f5b0af3a3b0f333c368daf3dd9e3a7e9a51.exe
"C:\Users\Admin\AppData\Local\Temp\48d67c8d66aa6c9700446f392d1d5f5b0af3a3b0f333c368daf3dd9e3a7e9a51.exe"
1⤵
- Drops file in Windows directory
PID:1836

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1836-54-0x0000000075C51000-0x0000000075C53000-memory.dmp

Filesize
8KB

Download
memory/1836-55-0x00000000003A0000-0x00000000003CF000-memory.dmp

Filesize
188KB

Download