a8f208d2304a92dd599eb72739e9028f193fe71a897edb819dbaccc9b47729ae

Analysis

max time kernel
39s
max time network
43s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/12/2022, 15:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a8f208d2304a92dd599eb72739e9028f193fe71a897edb819dbaccc9b47729ae.exe
Size

40KB
MD5

ed3ea010d40a464485588c093a50af9a
SHA1

8b2a4601965a891ec5546ac99eda8ab97b7443d8
SHA256

a8f208d2304a92dd599eb72739e9028f193fe71a897edb819dbaccc9b47729ae
SHA512

56f5e6255a465059038b11333f041126a67ed4618870bfd5a88fcb2e27cb8bde3eed86f2a1b12ba2ea5df25e054827c062d559287124886d2e296f1c962ea61e
SSDEEP

384:KmSBb3AD5lgc+sSGCDoRET3PUfD90yCJUL7CmJo2k:KmrD39+sSRG6Q0PU//Jo2k

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run	a8f208d2304a92dd599eb72739e9028f193fe71a897edb819dbaccc9b47729ae.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\System Initialization = "C:\\Users\\Admin\\AppData\\Local\\Temp\\a8f208d2304a92dd599eb72739e9028f193fe71a897edb819dbaccc9b47729ae.exe"	a8f208d2304a92dd599eb72739e9028f193fe71a897edb819dbaccc9b47729ae.exe

C:\Users\Admin\AppData\Local\Temp\a8f208d2304a92dd599eb72739e9028f193fe71a897edb819dbaccc9b47729ae.exe
"C:\Users\Admin\AppData\Local\Temp\a8f208d2304a92dd599eb72739e9028f193fe71a897edb819dbaccc9b47729ae.exe"
1⤵
- Adds Run key to start application
PID:1388

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...