9f3b50722bafb4db540bcbd94a900a022940571c33811924c1f23bdf45155ba0

Analysis

max time kernel
46s
max time network
127s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
29/10/2022, 05:21

Target

9f3b50722bafb4db540bcbd94a900a022940571c33811924c1f23bdf45155ba0.exe
Size

311KB
MD5

94e34da7fd91816e09f9b6e55dc529e1
SHA1

10d9c915c3b8d4a31461ef37214cb7e8a4a4d3dd
SHA256

9f3b50722bafb4db540bcbd94a900a022940571c33811924c1f23bdf45155ba0
SHA512

dbefcaa7775738d281b9e98b3efee1ffccaf30febe7196bb267fb485a163944ccc9671e9406aba4b1d06cb15d129bb09bd40b0e8e0cee395847995f5c43a1d7b
SSDEEP

6144:jRgXTWcehE//oL/mjCGoSSu9tGia6sJ1778DpE2kMW:FgjWRh1+jCp065GpIMW

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\SunRun.job	9f3b50722bafb4db540bcbd94a900a022940571c33811924c1f23bdf45155ba0.exe

C:\Users\Admin\AppData\Local\Temp\9f3b50722bafb4db540bcbd94a900a022940571c33811924c1f23bdf45155ba0.exe
"C:\Users\Admin\AppData\Local\Temp\9f3b50722bafb4db540bcbd94a900a022940571c33811924c1f23bdf45155ba0.exe"
1⤵
- Drops file in Windows directory
PID:1600

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1600-54-0x00000000752B1000-0x00000000752B3000-memory.dmp

Filesize
8KB

Download
memory/1600-55-0x00000000003A0000-0x00000000003CF000-memory.dmp

Filesize
188KB

Download