Analysis

  • max time kernel
    2s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 08:21

General

  • Target

    b9f79b3ce1087a5fb512fb3e26a4216b8d84652976cc9eb98ad1b3167ddcbcd1.exe

  • Size

    318KB

  • MD5

    bc1dff8ee81773b1a528b6e95fe7ce64

  • SHA1

    f8330e746ff26edbaebe8445ac35dd8271fa8908

  • SHA256

    b9f79b3ce1087a5fb512fb3e26a4216b8d84652976cc9eb98ad1b3167ddcbcd1

  • SHA512

    017e22ef044d4f02cf327bc63e2178d2bc03a908869a5a80c2e1f366bbfc8af8f64cd6b6225de57796ecca618de3b17f5b4716a44f3f6658c5005ec75a3636e3

  • SSDEEP

    6144:waWhzaE6Cy5w/cfPxqCq6q3OLJyitUCK/PPy8PlcA:rYzdy1fJbq5ewfXvPlcA

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b9f79b3ce1087a5fb512fb3e26a4216b8d84652976cc9eb98ad1b3167ddcbcd1.exe
    "C:\Users\Admin\AppData\Local\Temp\b9f79b3ce1087a5fb512fb3e26a4216b8d84652976cc9eb98ad1b3167ddcbcd1.exe"
    1⤵
      PID:1932

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1932-54-0x0000000075F51000-0x0000000075F53000-memory.dmp

      Filesize

      8KB

    • memory/1932-55-0x0000000001230000-0x000000000125F000-memory.dmp

      Filesize

      188KB