c91f9cfb4d385b0427283d6cd8028ed4336a4a12928b60e3d9b276dad2ef8cb8 | Triage

Analysis

max time kernel
114s
max time network
117s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
27-11-2022 06:53

Sharing

Report Analysis Logs

General

Target

c91f9cfb4d385b0427283d6cd8028ed4336a4a12928b60e3d9b276dad2ef8cb8.exe
Size

220KB
MD5

b01a47eb16d6943b8e6e801408e7ed95
SHA1

a39f2d4db338e8635c82436b63a5a5d8ebff855f
SHA256

c91f9cfb4d385b0427283d6cd8028ed4336a4a12928b60e3d9b276dad2ef8cb8
SHA512

55a648acfd891cecc30da49fec3bcaa0015464d128c776c7d9300d44863d2c1aab31ab5621fade71aaf1b7dfe43c547a284d37f81944b5e09a543df2df86226c
SSDEEP

1536:iCKDYCo5BMOClC9o4CVqJjDDDk1pw1OwrFNXvg6JAwAk8r3u6v:/2MaXAoVqJj3D+w1OwXvg6JAwAk8re6

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\c91f9cfb4d385b0427283d6cd8028ed4336a4a12928b60e3d9b276dad2ef8cb8.exe
"C:\Users\Admin\AppData\Local\Temp\c91f9cfb4d385b0427283d6cd8028ed4336a4a12928b60e3d9b276dad2ef8cb8.exe"
1⤵
PID:988

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/988-54-0x0000000000920000-0x0000000000959000-memory.dmp

Filesize
228KB

Download
memory/988-60-0x0000000075021000-0x0000000075023000-memory.dmp

Filesize
8KB

Download
memory/988-61-0x0000000000920000-0x0000000000959000-memory.dmp

Filesize
228KB

Download
memory/988-62-0x0000000000920000-0x0000000000959000-memory.dmp

Filesize
228KB

Download