5cca914d52fe46407e2744c80e9cba208aa8088afd3317a2b5da06f94da85dd2

Analysis

max time kernel
22s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06-11-2022 23:06

Target

5cca914d52fe46407e2744c80e9cba208aa8088afd3317a2b5da06f94da85dd2.exe
Size

347KB
MD5

06377a036c7558a5918180209117abff
SHA1

4a71e4d13c880683e503aa675b5e79c36ef153fc
SHA256

5cca914d52fe46407e2744c80e9cba208aa8088afd3317a2b5da06f94da85dd2
SHA512

bcbc6130200c00c45e6387a0cb26e59cfd1582f0007d5512866608cb456dd4084921af2585a197a0559ad00a61eb985dfe7e8f3f5d1b53d89bbea25062067d25
SSDEEP

6144:4rDTsx8ujGjWULJympDduFHu9q8I1hAc41Cub//vNdQ5TAQaRoZazU:QwZjO4mpDdkHp71hMCu7w5TAJEazU

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\EyeMaster.job	5cca914d52fe46407e2744c80e9cba208aa8088afd3317a2b5da06f94da85dd2.exe

C:\Users\Admin\AppData\Local\Temp\5cca914d52fe46407e2744c80e9cba208aa8088afd3317a2b5da06f94da85dd2.exe
"C:\Users\Admin\AppData\Local\Temp\5cca914d52fe46407e2744c80e9cba208aa8088afd3317a2b5da06f94da85dd2.exe"
1⤵
- Drops file in Windows directory
PID:1240

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1240-54-0x0000000075931000-0x0000000075933000-memory.dmp

Filesize
8KB

Download
memory/1240-55-0x00000000001D0000-0x00000000001FF000-memory.dmp

Filesize
188KB

Download