60b611f6af244148deeb7f0b44f6806e450c3da66f09bf5cd72e7481d26c3660

Analysis

max time kernel
43s
max time network
50s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/11/2022, 22:42

Target

60b611f6af244148deeb7f0b44f6806e450c3da66f09bf5cd72e7481d26c3660.exe
Size

296KB
MD5

0e1ade2152fb3569172fb38a31f7c248
SHA1

2eb6f0374f250a6477812955307b65c7455387df
SHA256

60b611f6af244148deeb7f0b44f6806e450c3da66f09bf5cd72e7481d26c3660
SHA512

b4d2314a5426d565bfc5a584bd59bf80f956f1d205388a081a042e51d75a49e00342d3e49980b5dc876ec4d7bf321dcd601da98f21ab1533eceb41f6bd8810c1
SSDEEP

6144:9tyEKhofBsp3DXjkddBAtjLheacqkXLZyIdpG:6EauSpb8HgjQqSscpG

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\TraffiCondition.job	60b611f6af244148deeb7f0b44f6806e450c3da66f09bf5cd72e7481d26c3660.exe

C:\Users\Admin\AppData\Local\Temp\60b611f6af244148deeb7f0b44f6806e450c3da66f09bf5cd72e7481d26c3660.exe
"C:\Users\Admin\AppData\Local\Temp\60b611f6af244148deeb7f0b44f6806e450c3da66f09bf5cd72e7481d26c3660.exe"
1⤵
- Drops file in Windows directory
PID:1760

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1760-54-0x0000000075281000-0x0000000075283000-memory.dmp

Filesize
8KB

Download
memory/1760-55-0x00000000002C0000-0x00000000002EF000-memory.dmp

Filesize
188KB

Download