8a89198db6285c8578c75057a9c8c87f59b27448ade28724f11b53132dbe8f07

Analysis

max time kernel
37s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
30-10-2022 03:50

Target

8a89198db6285c8578c75057a9c8c87f59b27448ade28724f11b53132dbe8f07.exe
Size

297KB
MD5

92ac1a6883412a5b574d74cb46a5a1d2
SHA1

40fcfa52d07a4acb1182e46b7798a8aea15b638a
SHA256

8a89198db6285c8578c75057a9c8c87f59b27448ade28724f11b53132dbe8f07
SHA512

13986b39092e9b496eafc3b7fd3720f90eedebc55895e9a6ab54a3d74e019a0740369cc244fecfd0aa3a962ba9931c4d1c7cffa7f5a86323153c3c8e6d4e428e
SSDEEP

6144:EMxB5h4o9miDF0Fx6khwaEjhvrc10EuS37O4cHTEyByom4WLrh:Eu5JRGXmroXuSrazaSWvh

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\BestSleep.job	8a89198db6285c8578c75057a9c8c87f59b27448ade28724f11b53132dbe8f07.exe

C:\Users\Admin\AppData\Local\Temp\8a89198db6285c8578c75057a9c8c87f59b27448ade28724f11b53132dbe8f07.exe
"C:\Users\Admin\AppData\Local\Temp\8a89198db6285c8578c75057a9c8c87f59b27448ade28724f11b53132dbe8f07.exe"
1⤵
- Drops file in Windows directory
PID:1748

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1748-54-0x0000000076BA1000-0x0000000076BA3000-memory.dmp

Filesize
8KB

Download
memory/1748-55-0x0000000000290000-0x00000000002BF000-memory.dmp

Filesize
188KB

Download