e6242baff24232d716b8c1902ba4421441406a9da1087abd0f6cb8a3280d568f

Analysis

max time kernel
46s
max time network
51s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
31/10/2022, 00:43

Target

e6242baff24232d716b8c1902ba4421441406a9da1087abd0f6cb8a3280d568f.exe
Size

295KB
MD5

9218856dff762f5ef5f77d6b70743cdb
SHA1

7e24c0e05c9a727de3fdf0fb44b1222f92dcbbfa
SHA256

e6242baff24232d716b8c1902ba4421441406a9da1087abd0f6cb8a3280d568f
SHA512

3541da7c216742dd83f6a2d038f550c011d284f82d31be20edf1e37dffdec38a9f268158418cbd85900b6a926a8646e24bec2a9496cb9586987fc1e7c07455d5
SSDEEP

6144:/bCMVjsq0UsAckwmmUaK9qU8LQKn1/4GHgEg:/bCeeXkPRaK4LQqJ7Hng

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\ReadSeed.job	e6242baff24232d716b8c1902ba4421441406a9da1087abd0f6cb8a3280d568f.exe

C:\Users\Admin\AppData\Local\Temp\e6242baff24232d716b8c1902ba4421441406a9da1087abd0f6cb8a3280d568f.exe
"C:\Users\Admin\AppData\Local\Temp\e6242baff24232d716b8c1902ba4421441406a9da1087abd0f6cb8a3280d568f.exe"
1⤵
- Drops file in Windows directory
PID:1324

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1324-54-0x00000000752B1000-0x00000000752B3000-memory.dmp

Filesize
8KB

Download
memory/1324-55-0x00000000000C0000-0x00000000000EF000-memory.dmp

Filesize
188KB

Download