ab09b2581f88a83ce4f595c8eb8e006f4b28abc3459daff724be69e9c89c3e8e

Analysis

max time kernel
44s
max time network
117s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
07-11-2022 13:33

Target

ab09b2581f88a83ce4f595c8eb8e006f4b28abc3459daff724be69e9c89c3e8e.exe
Size

2.4MB
MD5

057ba81eed94e21039019f52497cb41e
SHA1

8db7ac108e457543e2114008472693bdeac687cb
SHA256

ab09b2581f88a83ce4f595c8eb8e006f4b28abc3459daff724be69e9c89c3e8e
SHA512

ed73a8f878dd095f37c1c173c59626926f68bd9c3e22fdce5b1e713303d4f27b4e88631a3166b0c53a5fff9567f63334647e2683ae1b2e44b1b5ca7eb5f1e721
SSDEEP

12288:WVVdm8NBxThh7bIvRut7X6g80pCcPHX22iKO:IdzNBphpIvRutLHqcP32zKO

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\Bidaily Synchronize Task[973b].job	ab09b2581f88a83ce4f595c8eb8e006f4b28abc3459daff724be69e9c89c3e8e.exe

C:\Users\Admin\AppData\Local\Temp\ab09b2581f88a83ce4f595c8eb8e006f4b28abc3459daff724be69e9c89c3e8e.exe
"C:\Users\Admin\AppData\Local\Temp\ab09b2581f88a83ce4f595c8eb8e006f4b28abc3459daff724be69e9c89c3e8e.exe"
1⤵
- Drops file in Windows directory
PID:2016

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/2016-54-0x0000000075A71000-0x0000000075A73000-memory.dmp

Filesize
8KB

Download
memory/2016-55-0x0000000000970000-0x000000000099F000-memory.dmp

Filesize
188KB

Download