9324c443f90175d9eb7f8c706ef003c3c4d8b0c16ba7df327866090ecf5edbb9

Analysis

max time kernel
16s
max time network
34s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
22-10-2022 02:04

Target

9324c443f90175d9eb7f8c706ef003c3c4d8b0c16ba7df327866090ecf5edbb9.exe
Size

387KB
MD5

608e8de6af49a1eea752a0f22767b934
SHA1

7fa2be8ca01c4cb7dce9e61d87418247e7a54a98
SHA256

9324c443f90175d9eb7f8c706ef003c3c4d8b0c16ba7df327866090ecf5edbb9
SHA512

4829baa438c1431177066921f4eee2b9f7ad55e616c53648f1ab042867ad12d797a104fbdf19587211c06c4d32dee940c314b80336b948f0bcbb568615264296
SSDEEP

6144:nfrXululululululuAuOjzzUDjTgfH1okjroGWr2:nfrXKKKKKK1zjzQJ5

Score

1^/10

Enumerates system info in registry 2 TTPs 1 IoCs

Query Registry

System Information Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	9324c443f90175d9eb7f8c706ef003c3c4d8b0c16ba7df327866090ecf5edbb9.exe

C:\Users\Admin\AppData\Local\Temp\9324c443f90175d9eb7f8c706ef003c3c4d8b0c16ba7df327866090ecf5edbb9.exe
"C:\Users\Admin\AppData\Local\Temp\9324c443f90175d9eb7f8c706ef003c3c4d8b0c16ba7df327866090ecf5edbb9.exe"
1⤵
- Enumerates system info in registry
PID:4676

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact