cfd900cff1c3250a5d7c7877047ba7584332a426fdd226c220068fd69f36834e

Analysis

max time kernel
107s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
07-12-2022 00:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cfd900cff1c3250a5d7c7877047ba7584332a426fdd226c220068fd69f36834e.exe
Size

384KB
MD5

62b8c2af490976e17b47b53436c7ac4c
SHA1

3fcaa065f2fd23c781591f42cbf588d193d9b6fc
SHA256

cfd900cff1c3250a5d7c7877047ba7584332a426fdd226c220068fd69f36834e
SHA512

3694b19bcdd16e7857b8ce96a4924fcbbb347ec65b9df81fc58bfc63afc77dd00dd5608cd69bf0d3179e6a3db4c072fcfcb9d26abb5c1951dc5d9fcc9d53685e
SSDEEP

3072:qXHv/QT+yPw8OayL2WF1l8g5DZ9oemJi40xAQA8FUXX+I5:22O1l8EIeSN04u

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-929662420-1054238289-2961194603-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\4c4e45574d45490f445944 = "C:\\Users\\Admin\\vldh.exe"	cfd900cff1c3250a5d7c7877047ba7584332a426fdd226c220068fd69f36834e.exe
Key created	\REGISTRY\USER\S-1-5-21-929662420-1054238289-2961194603-1000\Software\Microsoft\Windows\CurrentVersion\Run	cfd900cff1c3250a5d7c7877047ba7584332a426fdd226c220068fd69f36834e.exe

C:\Users\Admin\AppData\Local\Temp\cfd900cff1c3250a5d7c7877047ba7584332a426fdd226c220068fd69f36834e.exe
"C:\Users\Admin\AppData\Local\Temp\cfd900cff1c3250a5d7c7877047ba7584332a426fdd226c220068fd69f36834e.exe"
1⤵
- Adds Run key to start application
PID:4252

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads