8060c1a3ffbfcf4471a10018d258ea15a8e20e0d07edb323fd31d39f6b4bb0cd

Analysis

max time kernel
37s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20-10-2022 20:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8060c1a3ffbfcf4471a10018d258ea15a8e20e0d07edb323fd31d39f6b4bb0cd.exe
Size

134KB
MD5

808edfecee0616a74f813608dbb96b71
SHA1

2964bdb06860d7184b551be278e03c4189e5d466
SHA256

8060c1a3ffbfcf4471a10018d258ea15a8e20e0d07edb323fd31d39f6b4bb0cd
SHA512

13aa1941b0e09414f71004be9e9e115838f73a2144cc01b9b96c9c871ea67e7942eccb5a1c952ff3b0c55b0fa3f25550ffc51b89ec54584a177917ed1b183ff8
SSDEEP

3072:ZfomR+DPHlfbBe1dvo7MGOR9QA1l7zbs6nqTXfdGPQ4Z8:ZAmRefVvpOR9Vb73hi4PQ4G

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 1 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	8060c1a3ffbfcf4471a10018d258ea15a8e20e0d07edb323fd31d39f6b4bb0cd.exe

C:\Users\Admin\AppData\Local\Temp\8060c1a3ffbfcf4471a10018d258ea15a8e20e0d07edb323fd31d39f6b4bb0cd.exe
"C:\Users\Admin\AppData\Local\Temp\8060c1a3ffbfcf4471a10018d258ea15a8e20e0d07edb323fd31d39f6b4bb0cd.exe"
1⤵
- Enumerates system info in registry
PID:2000

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2000-54-0x00000000754E1000-0x00000000754E3000-memory.dmp

Filesize
8KB

Download
memory/2000-55-0x00000000003E0000-0x00000000003F9000-memory.dmp

Filesize
100KB

Download
memory/2000-56-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download