ea8905a77198a76a26dafe1ba65b70a25a90c57ae0a5a398132adef338cebecd

Analysis

max time kernel
40s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/10/2022, 14:07

Target

ea8905a77198a76a26dafe1ba65b70a25a90c57ae0a5a398132adef338cebecd.exe
Size

209KB
MD5

2b09826fceb0be0c25bfb4a8dfb0cb70
SHA1

b2bbf6851ab5716738f7c913764d3cba895790d0
SHA256

ea8905a77198a76a26dafe1ba65b70a25a90c57ae0a5a398132adef338cebecd
SHA512

7ae4ec5b300d1a189f4aa7c1cd4294cf357b578203d8a895b780800b1193152a2a2f2e27e76e96cd38dd35ac7d551b6e194b57a3593916f948b38898852fb0d3
SSDEEP

3072:n2D4FYrdFEYfJLWPZBeujeynZkWQrcVzmWUc55clcRbU7nWADC72IPEWD4nPd:NudC3euZxQYLUc7Ad7JY2yEWMnPd

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\SmartCompanion.job	ea8905a77198a76a26dafe1ba65b70a25a90c57ae0a5a398132adef338cebecd.exe

C:\Users\Admin\AppData\Local\Temp\ea8905a77198a76a26dafe1ba65b70a25a90c57ae0a5a398132adef338cebecd.exe
"C:\Users\Admin\AppData\Local\Temp\ea8905a77198a76a26dafe1ba65b70a25a90c57ae0a5a398132adef338cebecd.exe"
1⤵
- Drops file in Windows directory
PID:1604

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1604-54-0x0000000075601000-0x0000000075603000-memory.dmp

Filesize
8KB

Download
memory/1604-55-0x00000000001B0000-0x00000000001DF000-memory.dmp

Filesize
188KB

Download
memory/1604-59-0x00000000008F1000-0x0000000000912000-memory.dmp

Filesize
132KB

Download