c74f2d5e695bfb5ed5d25497976d3115538a7e32acb32357a6cc12d3a160585d

Analysis

max time kernel
113s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
21/10/2022, 05:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c74f2d5e695bfb5ed5d25497976d3115538a7e32acb32357a6cc12d3a160585d.exe
Size

284KB
MD5

1ce125d791bcf4ecefc42d4234d64280
SHA1

79f729093896f909344e6f52c6a9a6e651c6b243
SHA256

c74f2d5e695bfb5ed5d25497976d3115538a7e32acb32357a6cc12d3a160585d
SHA512

539fa413646b5ecc9cfc1bd74ed26cf172d07445115616988fe8c527d45aa6eeb16c97465e01d42187ee86e7979bddd8705949142ed7ea793f4cef9b431795e9
SSDEEP

6144:ffk2Rlyt2KJMdJUD+PiESPOowHKY3aAyUIefzo:ffk2CJMdJ3SmotAhI

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-929662420-1054238289-2961194603-1000\Software\Microsoft\Windows\CurrentVersion\Run	c74f2d5e695bfb5ed5d25497976d3115538a7e32acb32357a6cc12d3a160585d.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-929662420-1054238289-2961194603-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\f9fbf0f1e1e2edbaf1ecf1 = "C:\\Users\\Admin\\euvy.exe"	c74f2d5e695bfb5ed5d25497976d3115538a7e32acb32357a6cc12d3a160585d.exe

C:\Users\Admin\AppData\Local\Temp\c74f2d5e695bfb5ed5d25497976d3115538a7e32acb32357a6cc12d3a160585d.exe
"C:\Users\Admin\AppData\Local\Temp\c74f2d5e695bfb5ed5d25497976d3115538a7e32acb32357a6cc12d3a160585d.exe"
1⤵
- Adds Run key to start application
PID:3952

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3952-132-0x0000000000400000-0x0000000000447000-memory.dmp

Filesize
284KB

Download
memory/3952-133-0x0000000000400000-0x0000000000447000-memory.dmp

Filesize
284KB

Download
memory/3952-134-0x0000000000400000-0x0000000000447000-memory.dmp

Filesize
284KB

Download