aeafb4319980122c62144c58f8ed981a73687f016a55f516c215aea11944691b

Analysis

max time kernel
150s
max time network
233s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
26/11/2022, 21:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Registro2_PEFIN_SERASA-02-12-2014 - Cpia (3).exe
Size

835KB
MD5

2d61fbab1bfdf56e4ce06c5ac0c0cbe5
SHA1

402a52a14bbab339696081e0eab818896bc08913
SHA256

ce42132078ac5af2355bd9a32b55aabb8a70347b78ce77f8777a8089b21db951
SHA512

0d1f677457e618d091fdae48d573de34d263358675dbbdd417a86bcc25c9e6db8db9942977edbebfffe85b9089a80c29248d60e096e3618d0f759a09c02dedb8
SSDEEP

24576:T2J6OUD6n1WQ+sXoWmQXCU5i5xGyh3BRGV:TQypOCD5xGyh3LG

Score

6^/10

evasion trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Registro2_PEFIN_SERASA-02-12-2014 - Cpia (3).exe

C:\Users\Admin\AppData\Local\Temp\Registro2_PEFIN_SERASA-02-12-2014 - Cpia (3).exe
"C:\Users\Admin\AppData\Local\Temp\Registro2_PEFIN_SERASA-02-12-2014 - Cpia (3).exe"
1⤵
- Checks whether UAC is enabled
PID:848

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/848-54-0x0000000074FA1000-0x0000000074FA3000-memory.dmp

Filesize
8KB

Download