59fe0db8940562dd7793ab6f1cad65f2192a86eeb2bca83c4576e282fb90a86b

Analysis

max time kernel
105s
max time network
111s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/10/2022, 13:20

Target

59fe0db8940562dd7793ab6f1cad65f2192a86eeb2bca83c4576e282fb90a86b.exe
Size

285KB
MD5

44133f623a83f517f9db47bfe7f03690
SHA1

574f97626804d8d18749187fe6c2dca52a64df7e
SHA256

59fe0db8940562dd7793ab6f1cad65f2192a86eeb2bca83c4576e282fb90a86b
SHA512

7e1041fffe996c6ff2ef3a835936a6525469e91ae43908519c70e8b7e9e73baed11538102f81688e6289cd23d093b9b91c26f4848b5504841e71c39a9cc132eb
SSDEEP

3072:DLYmRDCmYzDblNQMu9eOc2Jy5Ra9tVqe/k9LclEUcjhaHFuUZex6xaj6DVlR1I3:vw/TaE2Jy5oEe/kpcWaJeGHI3

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\BeneFit.job	59fe0db8940562dd7793ab6f1cad65f2192a86eeb2bca83c4576e282fb90a86b.exe

C:\Users\Admin\AppData\Local\Temp\59fe0db8940562dd7793ab6f1cad65f2192a86eeb2bca83c4576e282fb90a86b.exe
"C:\Users\Admin\AppData\Local\Temp\59fe0db8940562dd7793ab6f1cad65f2192a86eeb2bca83c4576e282fb90a86b.exe"
1⤵
- Drops file in Windows directory
PID:1372

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1372-54-0x0000000076261000-0x0000000076263000-memory.dmp

Filesize
8KB

Download
memory/1372-55-0x0000000000C91000-0x0000000000CB2000-memory.dmp

Filesize
132KB

Download
memory/1372-56-0x00000000000F0000-0x000000000011F000-memory.dmp

Filesize
188KB

Download
memory/1372-60-0x0000000000C91000-0x0000000000CB2000-memory.dmp

Filesize
132KB

Download