63a57d005dc589dae1ffeedf20f1e3b932977a15f58f265563ff6afadef79d8d

Analysis

max time kernel
41s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
31/10/2022, 00:35

Target

63a57d005dc589dae1ffeedf20f1e3b932977a15f58f265563ff6afadef79d8d.exe
Size

286KB
MD5

82b7f40b193dace77113db9810ef5470
SHA1

f78d138c8edb43f05b5bf48fce35ec86e02c0031
SHA256

63a57d005dc589dae1ffeedf20f1e3b932977a15f58f265563ff6afadef79d8d
SHA512

9d6a3715cce0cb6ef0b84d38529d977f03be2718e91a2a46e27adef2888550f960902543c63126bf3e3adf00d4247bfc70d9a065dec3e929bd1df49cddbde555
SSDEEP

6144:rdJW03qFSlVF47FCYdqzysGZuBcaE7VoIETemO9ch:rDW03qKO7rdiysGZOc3+6pch

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\SocialTrust.job	63a57d005dc589dae1ffeedf20f1e3b932977a15f58f265563ff6afadef79d8d.exe

C:\Users\Admin\AppData\Local\Temp\63a57d005dc589dae1ffeedf20f1e3b932977a15f58f265563ff6afadef79d8d.exe
"C:\Users\Admin\AppData\Local\Temp\63a57d005dc589dae1ffeedf20f1e3b932977a15f58f265563ff6afadef79d8d.exe"
1⤵
- Drops file in Windows directory
PID:1672

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1672-54-0x00000000753C1000-0x00000000753C3000-memory.dmp

Filesize
8KB

Download
memory/1672-55-0x00000000000F0000-0x000000000011F000-memory.dmp

Filesize
188KB

Download
memory/1672-59-0x0000000000811000-0x0000000000832000-memory.dmp

Filesize
132KB

Download