5efd4aac2892673d8eef45daa2abef97e3e384f8291ed3949542328bda6ced56

Analysis

max time kernel
48s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 20:13

Target

5efd4aac2892673d8eef45daa2abef97e3e384f8291ed3949542328bda6ced56.exe
Size

294KB
MD5

816a23dd217d38760ee427c1a779a450
SHA1

f3edb09851be0b5132adc03e168936059f77744f
SHA256

5efd4aac2892673d8eef45daa2abef97e3e384f8291ed3949542328bda6ced56
SHA512

dcf81707daa11e05fb1d039b4aa1f0999bec8b6f4766a35b88cc12695dbfa9de46f89362fbe8e67c3e5cf5653e1e0b3538fd804ac318844559efb9ecc9b9f4c8
SSDEEP

6144:I8EyefYwEAuxx02dgH3rqh0vTG50HA4w14:QFEtLryH3+hATGCH+4

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\SolidTiles.job	5efd4aac2892673d8eef45daa2abef97e3e384f8291ed3949542328bda6ced56.exe

C:\Users\Admin\AppData\Local\Temp\5efd4aac2892673d8eef45daa2abef97e3e384f8291ed3949542328bda6ced56.exe
"C:\Users\Admin\AppData\Local\Temp\5efd4aac2892673d8eef45daa2abef97e3e384f8291ed3949542328bda6ced56.exe"
1⤵
- Drops file in Windows directory
PID:1328

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1328-54-0x0000000075FE1000-0x0000000075FE3000-memory.dmp

Filesize
8KB

Download
memory/1328-55-0x0000000000150000-0x000000000017F000-memory.dmp

Filesize
188KB

Download
memory/1328-59-0x0000000000111000-0x0000000000132000-memory.dmp

Filesize
132KB

Download
memory/1328-60-0x0000000000111000-0x0000000000132000-memory.dmp

Filesize
132KB

Download