87f23f3a275e1a1afaa5340a2768c03393efe0814a96183d85f3a9f4f3c89e1d | Triage

Analysis

max time kernel
40s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
12/01/2023, 21:38

Sharing

Report Analysis Logs

General

Target

87f23f3a275e1a1afaa5340a2768c03393efe0814a96183d85f3a9f4f3c89e1d.exe
Size

3.0MB
MD5

e74f07f4a67ab34db06ccef281e1daf5
SHA1

6c28ac8111a893ec313c451c0ecf61c1c737d6c6
SHA256

87f23f3a275e1a1afaa5340a2768c03393efe0814a96183d85f3a9f4f3c89e1d
SHA512

0529fc5d2d46a8b1c661eabc889eda0388d6c4c9e929521259b3ad70d14aae635148c214f7912ba02c0c5d3fc5bf23b11559d28c3ce217d19e771bc697917b99
SSDEEP

98304:pkspc/o30ia81fR2AymG/UlCqW3DXjzsSXgDEm:pksaSQAjVWzXjzssgDf

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\87f23f3a275e1a1afaa5340a2768c03393efe0814a96183d85f3a9f4f3c89e1d.exe
"C:\Users\Admin\AppData\Local\Temp\87f23f3a275e1a1afaa5340a2768c03393efe0814a96183d85f3a9f4f3c89e1d.exe"
1⤵
PID:1880

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1880-54-0x0000000075571000-0x0000000075573000-memory.dmp

Filesize
8KB

Download