87aa5510a2f54a6dfee46736850df11a4ee6dc30a2dcc22ee067e32de78e9d36

Analysis

max time kernel
11s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/10/2022, 14:41

Target

87aa5510a2f54a6dfee46736850df11a4ee6dc30a2dcc22ee067e32de78e9d36.exe
Size

285KB
MD5

2f70286cee57b4084833bf539428712a
SHA1

eaffb44f963f66adf12e798fb5ce8716f70481d6
SHA256

87aa5510a2f54a6dfee46736850df11a4ee6dc30a2dcc22ee067e32de78e9d36
SHA512

fb3f9ed350d3997319ecc09f9b5258f4f6123b0c1623781f64b6c779d745b542e082088f03c5d5080df45ac742824b42d6e6685162a6286d4bcff8a7b16faf48
SSDEEP

3072:nLYmRDCmYzDblNQMu9eOc2Jy5Ra9tVqe/k9LclEUcjk53zGDbbmHog1o/Fpr8TfU:Lw/TaE2Jy5oEe/kpcWU53zEvHN8TfU

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\VideoKeep.job	87aa5510a2f54a6dfee46736850df11a4ee6dc30a2dcc22ee067e32de78e9d36.exe

C:\Users\Admin\AppData\Local\Temp\87aa5510a2f54a6dfee46736850df11a4ee6dc30a2dcc22ee067e32de78e9d36.exe
"C:\Users\Admin\AppData\Local\Temp\87aa5510a2f54a6dfee46736850df11a4ee6dc30a2dcc22ee067e32de78e9d36.exe"
1⤵
- Drops file in Windows directory
PID:1948

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1948-54-0x0000000076871000-0x0000000076873000-memory.dmp

Filesize
8KB

Download
memory/1948-55-0x00000000000C0000-0x00000000000EF000-memory.dmp

Filesize
188KB

Download
memory/1948-59-0x0000000000651000-0x0000000000672000-memory.dmp

Filesize
132KB

Download