aabc6ff33a3f452b078af0159a663eb03b66678d2dd37aa076f89e1247847c8d

Analysis

max time kernel
155s
max time network
169s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 15:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

aabc6ff33a3f452b078af0159a663eb03b66678d2dd37aa076f89e1247847c8d.exe
Size

15KB
MD5

6604f28c302d8c7392f972d7f36565d9
SHA1

7a467fc13c6fec8f8b95a98e61b10035d0e050fb
SHA256

aabc6ff33a3f452b078af0159a663eb03b66678d2dd37aa076f89e1247847c8d
SHA512

b7875cdbf3f6627d541b7ee0fa2c0155ad2f21496621998799865c3457c79f5ef67f6a539322d8e1b9779c7a98da46330dd4d481edf7129e0a7769dc45da553c
SSDEEP

192:SD7hEiuZWDKf7uOdOgbS6vPh1tqHsiM0qWgjFORBM+:Sv/IcwOgF4sXm

Score

7^/10

persistence

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
3988	aabc6ff33a3f452b078af0159a663eb03b66678d2dd37aa076f89e1247847c8d.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\system = "C:\\Windows\\system32\\system.exe"	aabc6ff33a3f452b078af0159a663eb03b66678d2dd37aa076f89e1247847c8d.exe

C:\Users\Admin\AppData\Local\Temp\aabc6ff33a3f452b078af0159a663eb03b66678d2dd37aa076f89e1247847c8d.exe
"C:\Users\Admin\AppData\Local\Temp\aabc6ff33a3f452b078af0159a663eb03b66678d2dd37aa076f89e1247847c8d.exe"
1⤵
- Loads dropped DLL
- Adds Run key to start application
PID:3988

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\A8D7.tmp

Filesize
4.3MB

MD5
6c7cdd25c2cb0073306eb22aebfc663f

SHA1
a1eba8ab49272b9852fe6a543677e8af36271248

SHA256
58280e3572333f97a7cf9f33e8d31dc26a98b6535965ebd0bde82249fc9bf705

SHA512
17344e07b9e9b2cd6ae4237d7f310732462f9cbb8656883607d7a1a4090e869265f92a6da1718dee50b1375b91583de60c6bd9e7e8db6b6e45e33f4b894365d6

Download Submit