79278d21cfa5dd0faec4551609219691ae13668b3848278656ca99f9290a4d97

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 19:00

Target

79278d21cfa5dd0faec4551609219691ae13668b3848278656ca99f9290a4d97.exe
Size

217KB
MD5

5a7ed064fb0042c7d1e635e3ec0ca0a0
SHA1

525c6c7d4af22319a607482abecd55cfe5656aab
SHA256

79278d21cfa5dd0faec4551609219691ae13668b3848278656ca99f9290a4d97
SHA512

2f4c700bf893bac714f1e1fd3c91d623dd63e4f70ace547b8b2d14c069b1ad90bf814b15e42eb56ec69b65fb68727de070d90ffec7a453336aa5ffc4f2a2474a
SSDEEP

6144:Wx2+/R7F205s22EJXUJAmlid8jVQz2uYVj8P:WxFRxZRJGrA8jOC8P

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\GreatCooks.job	79278d21cfa5dd0faec4551609219691ae13668b3848278656ca99f9290a4d97.exe

C:\Users\Admin\AppData\Local\Temp\79278d21cfa5dd0faec4551609219691ae13668b3848278656ca99f9290a4d97.exe
"C:\Users\Admin\AppData\Local\Temp\79278d21cfa5dd0faec4551609219691ae13668b3848278656ca99f9290a4d97.exe"
1⤵
- Drops file in Windows directory
PID:900

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/900-54-0x0000000076121000-0x0000000076123000-memory.dmp

Filesize
8KB

Download
memory/900-55-0x0000000000600000-0x000000000062F000-memory.dmp

Filesize
188KB

Download