6b3da853d71971e0d25af90c0c4f9615e645db2f547a023e4e77dd1d551b78b8

Analysis

max time kernel
91s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 03:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6b3da853d71971e0d25af90c0c4f9615e645db2f547a023e4e77dd1d551b78b8.exe
Size

199KB
MD5

8cb62a156971ce47e5240a25932faa45
SHA1

29519ab6377f6dda653f5a06b57d0bef90e71163
SHA256

6b3da853d71971e0d25af90c0c4f9615e645db2f547a023e4e77dd1d551b78b8
SHA512

deb05bd443cb5665d8b4588af86521d0835be6b3e79730e69a910ad1868e79b8eaafb0746d637a0dfade0b7fe996ad84171af00aa9c29bd3c5dd50ec5433a6d7
SSDEEP

3072:mk+Hn2oM3TUULfoAGrLGBgNGGoJKG7ERRbuemXhJGTr5cxXgj2:OnhM3BoHpoGoJKzRg1EcxQq

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 1 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	6b3da853d71971e0d25af90c0c4f9615e645db2f547a023e4e77dd1d551b78b8.exe

C:\Users\Admin\AppData\Local\Temp\6b3da853d71971e0d25af90c0c4f9615e645db2f547a023e4e77dd1d551b78b8.exe
"C:\Users\Admin\AppData\Local\Temp\6b3da853d71971e0d25af90c0c4f9615e645db2f547a023e4e77dd1d551b78b8.exe"
1⤵
- Enumerates system info in registry
PID:4928

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...