c70d6bc93664d66c5f862e1d5413cc8d69dd8b9954210b5037a4cbf7b96c4dda

Analysis

max time kernel
48s
max time network
87s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
30/10/2022, 03:46

Target

c70d6bc93664d66c5f862e1d5413cc8d69dd8b9954210b5037a4cbf7b96c4dda.exe
Size

346KB
MD5

83bfb79963be8b2963732eaac5e75afc
SHA1

ea206c2492fe0518a4dc56b096717bc3e45ad5b1
SHA256

c70d6bc93664d66c5f862e1d5413cc8d69dd8b9954210b5037a4cbf7b96c4dda
SHA512

7e899485ca5b422d21a28e32488d71cbe0febf91beb60a75c48a824d8bfab55b834a373cac14ba82a9bbcd349ed8f67704adfd2210db4bd3edcb3de95ecdbeac
SSDEEP

6144:kEs5I9qPqJA1df+c3WYBHL19fwXLCzbNDfTXyh/YdTs:kp5TPqJu719fwYJTCYdTs

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\CashTags.job	c70d6bc93664d66c5f862e1d5413cc8d69dd8b9954210b5037a4cbf7b96c4dda.exe

C:\Users\Admin\AppData\Local\Temp\c70d6bc93664d66c5f862e1d5413cc8d69dd8b9954210b5037a4cbf7b96c4dda.exe
"C:\Users\Admin\AppData\Local\Temp\c70d6bc93664d66c5f862e1d5413cc8d69dd8b9954210b5037a4cbf7b96c4dda.exe"
1⤵
- Drops file in Windows directory
PID:960

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/960-54-0x0000000075141000-0x0000000075143000-memory.dmp

Filesize
8KB

Download
memory/960-55-0x0000000000880000-0x00000000008AF000-memory.dmp

Filesize
188KB

Download