c87ada4e2ab7e9a81cfdcf619b7ca4da966a6eab8106c81931af7d0362cb7066

Analysis

max time kernel
46s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
30/10/2022, 03:46

Target

c87ada4e2ab7e9a81cfdcf619b7ca4da966a6eab8106c81931af7d0362cb7066.exe
Size

337KB
MD5

a292b9ed49b42d402d57232103438fdd
SHA1

f861af298bd5fb4001b7461e1ba475e10c930bf4
SHA256

c87ada4e2ab7e9a81cfdcf619b7ca4da966a6eab8106c81931af7d0362cb7066
SHA512

c811d6391b11b8165c4b627e21c371295171a0ba8b5cc6db2907814b720389d84df2123bd9ead6a59a350a3050e169cfd92cf43e5315a8e9780b1df1a17a0b04
SSDEEP

6144:2p1Jn/NBJO3tfe5TFxnAmGRSyQYmpRDc:oznlBJ2tIZADRjERDc

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\PassMaster.job	c87ada4e2ab7e9a81cfdcf619b7ca4da966a6eab8106c81931af7d0362cb7066.exe

C:\Users\Admin\AppData\Local\Temp\c87ada4e2ab7e9a81cfdcf619b7ca4da966a6eab8106c81931af7d0362cb7066.exe
"C:\Users\Admin\AppData\Local\Temp\c87ada4e2ab7e9a81cfdcf619b7ca4da966a6eab8106c81931af7d0362cb7066.exe"
1⤵
- Drops file in Windows directory
PID:1768

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1768-54-0x0000000076961000-0x0000000076963000-memory.dmp

Filesize
8KB

Download
memory/1768-55-0x0000000000240000-0x000000000026F000-memory.dmp

Filesize
188KB

Download