d4405c6c11d67da2145a3e0aa6a3374f02ea391ffbdc4c3b2082268dd432984d

Analysis

max time kernel
150s
max time network
142s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
03/12/2022, 14:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d4405c6c11d67da2145a3e0aa6a3374f02ea391ffbdc4c3b2082268dd432984d.exe
Size

508KB
MD5

34265893bbb56c073cde8fe9fe1e21a3
SHA1

ad1b11ebdd90b76e61207877525ea5bd7613950b
SHA256

d4405c6c11d67da2145a3e0aa6a3374f02ea391ffbdc4c3b2082268dd432984d
SHA512

daed19c99fcb5877dfe96a230daf8d5b3143a18095928e3f16af1796e8b89a8de228a4eabb8c55b2001b74135442c507ee7a8ead7e90e45ac9ff982ddbebd4e9
SSDEEP

12288:VkiQ+3P2/bK3o5ir6OSUO3ZrqdgozymiT:Gx+u/O7PSZqdR

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\msmsgr = "C:\\Arquivos de Progamas\\Internet Explorer\\DW32.exe"	d4405c6c11d67da2145a3e0aa6a3374f02ea391ffbdc4c3b2082268dd432984d.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\WINDOWS\Log.txt	d4405c6c11d67da2145a3e0aa6a3374f02ea391ffbdc4c3b2082268dd432984d.exe

C:\Users\Admin\AppData\Local\Temp\d4405c6c11d67da2145a3e0aa6a3374f02ea391ffbdc4c3b2082268dd432984d.exe
"C:\Users\Admin\AppData\Local\Temp\d4405c6c11d67da2145a3e0aa6a3374f02ea391ffbdc4c3b2082268dd432984d.exe"
1⤵
- Adds Run key to start application
- Drops file in Windows directory
PID:1672

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads