8cc761ae909f6a8585c2c8bd59a67f2bcc6347326c7f3fcc5a10f414e572a235

Analysis

max time kernel
186s
max time network
229s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2022 09:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8cc761ae909f6a8585c2c8bd59a67f2bcc6347326c7f3fcc5a10f414e572a235.exe
Size

438KB
MD5

01de1973c9b1e8f4469472baca57df40
SHA1

c43ecd89e698a9fb11dadca5f0d13b9538bd2426
SHA256

8cc761ae909f6a8585c2c8bd59a67f2bcc6347326c7f3fcc5a10f414e572a235
SHA512

e0b309fe1084aaf9dfc8f27fe685bdace4acb822b8188719eab9c994e77c10a0763e07397f1a33af142faec22b766719832271fc3534e2c82e1bc396363cafec
SSDEEP

6144:gs833CnotE7RN8JRHnzOXYk0qqYpkn6U+Hjpu2XpWXBYbv/Hz7VF:mLtE7RaXzmiFYp7UyjMYbv/Hzf

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\System-Service = "C:\\Windows\\SYSTEM\\EXPLORER.SCR"	8cc761ae909f6a8585c2c8bd59a67f2bcc6347326c7f3fcc5a10f414e572a235.exe

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SYSTEM\EXPLORER.SCR	8cc761ae909f6a8585c2c8bd59a67f2bcc6347326c7f3fcc5a10f414e572a235.exe
File created	C:\Windows\SYSTEM\EXPLORER.SCR	8cc761ae909f6a8585c2c8bd59a67f2bcc6347326c7f3fcc5a10f414e572a235.exe

C:\Users\Admin\AppData\Local\Temp\8cc761ae909f6a8585c2c8bd59a67f2bcc6347326c7f3fcc5a10f414e572a235.exe
"C:\Users\Admin\AppData\Local\Temp\8cc761ae909f6a8585c2c8bd59a67f2bcc6347326c7f3fcc5a10f414e572a235.exe"
1⤵
- Adds Run key to start application
- Drops file in Windows directory
PID:240

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads