9e04bc6e019e744d2c2615bd6c37f542554261c256a662adb823870181d688df

Analysis

max time kernel
50s
max time network
62s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 13:29

Target

9e04bc6e019e744d2c2615bd6c37f542554261c256a662adb823870181d688df.exe
Size

346KB
MD5

52a71990719d8d210a4f0164573211e0
SHA1

cf020e3836175244708fd4d2a9a1a45e58ad8cd6
SHA256

9e04bc6e019e744d2c2615bd6c37f542554261c256a662adb823870181d688df
SHA512

f1188adf891bc8f460a82346882a3b42b5bbe9edcdee2b7ebea5881fafeda40d81127a384eee6bd0017a8340ef0007ba5e3235a79b9c0a993d149a40af525969
SSDEEP

6144:oBp5ls7XWICWjju9TawR8OYBbL0ubPOampQhQ13AxAIpaFzf:oP5YmIa5R8xXNmGK1QxPaFzf

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\SecurityBoost.job	9e04bc6e019e744d2c2615bd6c37f542554261c256a662adb823870181d688df.exe

C:\Users\Admin\AppData\Local\Temp\9e04bc6e019e744d2c2615bd6c37f542554261c256a662adb823870181d688df.exe
"C:\Users\Admin\AppData\Local\Temp\9e04bc6e019e744d2c2615bd6c37f542554261c256a662adb823870181d688df.exe"
1⤵
- Drops file in Windows directory
PID:944

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/944-54-0x0000000075021000-0x0000000075023000-memory.dmp

Filesize
8KB

Download
memory/944-55-0x00000000002C0000-0x00000000002EF000-memory.dmp

Filesize
188KB

Download