0dcd31f5b990afabcd3809ae51639cf1afb0917dc1addd860ca77361b231f363

Analysis

max time kernel
73s
max time network
89s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
30/10/2022, 04:16

Target

0dcd31f5b990afabcd3809ae51639cf1afb0917dc1addd860ca77361b231f363.exe
Size

302KB
MD5

84c81d62510133a39e0bdb71c0af4321
SHA1

0cb0343d5904fbd9c8815b261563b803a0b3a278
SHA256

0dcd31f5b990afabcd3809ae51639cf1afb0917dc1addd860ca77361b231f363
SHA512

0e4c3dd0ca204601c08b87688857aef5cfb2be60c09ca136df6402301136884402264bee5171e9af779970c16384da65e1ef4d8d0aee9e901663aea5573e82c9
SSDEEP

3072:tIUZwnFHmXSz/njI1uAERYRuyEsJYCnLs7k7VoAyVIrviW+BjsThY:tJZpXoPVYI6JYCn47kxoAyVIrlhY

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\MatchUp.job	0dcd31f5b990afabcd3809ae51639cf1afb0917dc1addd860ca77361b231f363.exe

C:\Users\Admin\AppData\Local\Temp\0dcd31f5b990afabcd3809ae51639cf1afb0917dc1addd860ca77361b231f363.exe
"C:\Users\Admin\AppData\Local\Temp\0dcd31f5b990afabcd3809ae51639cf1afb0917dc1addd860ca77361b231f363.exe"
1⤵
- Drops file in Windows directory
PID:1924

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1924-54-0x0000000075A81000-0x0000000075A83000-memory.dmp

Filesize
8KB

Download
memory/1924-55-0x0000000000F00000-0x0000000000F2F000-memory.dmp

Filesize
188KB

Download