e7740f36539157e8861c52ad77a6be678b0df284ce4e607af8c7fa0f016efe65

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
21-11-2022 12:17

Target

e7740f36539157e8861c52ad77a6be678b0df284ce4e607af8c7fa0f016efe65.exe
Size

196KB
MD5

2084fd89e2ccf87a75324f79e5768b9f
SHA1

907e763f0a6cea98de863678c55fb7ee18b77d75
SHA256

e7740f36539157e8861c52ad77a6be678b0df284ce4e607af8c7fa0f016efe65
SHA512

de7dc2b9b073748bac7b4c395c12b8728208c5fb9d70fa0e8d57a00239ce2a24f4dac8f16667d7335616cf61709f18a12cc35db98cce8076c1dacd7795447d82
SSDEEP

6144:FyAFhrt35QOxYzGuzoEJyhoxujMTMXj1aM4:gAHR35Q28GuzoEJIe6l4

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\MotionFix.job	e7740f36539157e8861c52ad77a6be678b0df284ce4e607af8c7fa0f016efe65.exe

C:\Users\Admin\AppData\Local\Temp\e7740f36539157e8861c52ad77a6be678b0df284ce4e607af8c7fa0f016efe65.exe
"C:\Users\Admin\AppData\Local\Temp\e7740f36539157e8861c52ad77a6be678b0df284ce4e607af8c7fa0f016efe65.exe"
1⤵
- Drops file in Windows directory
PID:1956

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1956-54-0x0000000075141000-0x0000000075143000-memory.dmp

Filesize
8KB

Download
memory/1956-55-0x0000000000820000-0x000000000084F000-memory.dmp

Filesize
188KB

Download