c0cae0012864b8ab34bcd9c633502d3d24d737cb887c19bc815444e64515daf7

Analysis

max time kernel
143s
max time network
149s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 13:27

Target

c0cae0012864b8ab34bcd9c633502d3d24d737cb887c19bc815444e64515daf7.exe
Size

298KB
MD5

818fe31effcd962ef99df743cb1ac537
SHA1

fae5c39a3a229b40380977e097b3305ccfd5d2fb
SHA256

c0cae0012864b8ab34bcd9c633502d3d24d737cb887c19bc815444e64515daf7
SHA512

639c467e31d61a5781ec401d28d2eefc15614a7734909c8d502b067cfcaf630e393141b8f3e3077e8e510953946bd67492a2662a52fdc064c56707e9a3fa7051
SSDEEP

6144:gwk8olB/V+eyRyYCv3O/xYtY6NlL9oAGCMaW8/0:gwk8oH/dep+Y6NboCMaT0

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\HuskyKey.job	c0cae0012864b8ab34bcd9c633502d3d24d737cb887c19bc815444e64515daf7.exe

C:\Users\Admin\AppData\Local\Temp\c0cae0012864b8ab34bcd9c633502d3d24d737cb887c19bc815444e64515daf7.exe
"C:\Users\Admin\AppData\Local\Temp\c0cae0012864b8ab34bcd9c633502d3d24d737cb887c19bc815444e64515daf7.exe"
1⤵
- Drops file in Windows directory
PID:1200

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1200-54-0x0000000075AC1000-0x0000000075AC3000-memory.dmp

Filesize
8KB

Download
memory/1200-55-0x00000000003A0000-0x00000000003CF000-memory.dmp

Filesize
188KB

Download