47e354afbc26ed817e3bf7c516cb47e091648001cfc209a2d1f347d515d98052

Analysis

max time kernel
141s
max time network
148s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
21/11/2022, 12:29

Target

47e354afbc26ed817e3bf7c516cb47e091648001cfc209a2d1f347d515d98052.exe
Size

343KB
MD5

106fc2c833dbe6b6ceaa78a012215e4a
SHA1

6cb5c4164f5761e7d0ddb3297e625141c3a91895
SHA256

47e354afbc26ed817e3bf7c516cb47e091648001cfc209a2d1f347d515d98052
SHA512

151609c58b6227475a92dcb076fa160e6900928fe3c8e3d38971a8f2bb8dfb1011c11c0076f56c0e655d53037b7c9017ed64beaba0cc6a810341768a93830e31
SSDEEP

6144:67vJRFbFHskaSgF7PQP7oqQtLoEw1QuNJ0zLkigCI76xJG5usxQ/htvYpX7TpJWu:KvJRFxW6ToqQts3Qun03EC2oGUs65tE3

Score

6^/10

discovery

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\PocketScanner.job	47e354afbc26ed817e3bf7c516cb47e091648001cfc209a2d1f347d515d98052.exe

C:\Users\Admin\AppData\Local\Temp\47e354afbc26ed817e3bf7c516cb47e091648001cfc209a2d1f347d515d98052.exe
"C:\Users\Admin\AppData\Local\Temp\47e354afbc26ed817e3bf7c516cb47e091648001cfc209a2d1f347d515d98052.exe"
1⤵
- Drops file in Windows directory
PID:1184

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1184-54-0x0000000075A11000-0x0000000075A13000-memory.dmp

Filesize
8KB

Download
memory/1184-55-0x0000000000200000-0x000000000022F000-memory.dmp

Filesize
188KB

Download
memory/1184-59-0x0000000003730000-0x0000000003757000-memory.dmp

Filesize
156KB

Download
memory/1184-63-0x0000000000160000-0x000000000019B000-memory.dmp

Filesize
236KB

Download
memory/1184-64-0x0000000000160000-0x000000000019B000-memory.dmp

Filesize
236KB

Download