Overview

overview

6

Static

static

c7970266ec...c1.exe

windows7-x64

6

c7970266ec...c1.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    191s
  • max time network
    194s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 17:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    c7970266ec8e7b9e8ec9a64b20682f06ee11274e238fd5e262e2795d09f189c1.exe

  • Size

    465KB

  • MD5

    e1df8be5d3fe23b7048ea8a3e9dc3a09

  • SHA1

    0e98455c68401980b88fea2c32562149815d5d9a

  • SHA256

    c7970266ec8e7b9e8ec9a64b20682f06ee11274e238fd5e262e2795d09f189c1

  • SHA512

    444310331a52215e8c7ae6e75869c9eea5479d812a62ceabc66d58114e54e5e6e405c0698236b821f7f38d9c0c75cc5742ec8800ccf84da8319592d14b30eb5a

  • SSDEEP

    12288:snwXqFHOMlDu0g27ag78CqxP/M5pZCGRe+7lRNSVx:lXEpUcF7DYP/sZCQDlRIV

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c7970266ec8e7b9e8ec9a64b20682f06ee11274e238fd5e262e2795d09f189c1.exe
    "C:\Users\Admin\AppData\Local\Temp\c7970266ec8e7b9e8ec9a64b20682f06ee11274e238fd5e262e2795d09f189c1.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in System32 directory
    PID:3052

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3052-132-0x0000000000400000-0x0000000000487000-memory.dmp

          Filesize

          540KB

          Download