56e03d87d8e944c4c5fb0283d4e831857986db8bb10e0be842dfa4016381d7fc | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
19-09-2023 09:57

Sharing

Report Analysis Logs

General

Target

56e03d87d8e944c4c5fb0283d4e831857986db8bb10e0be842dfa4016381d7fc.exe
Size

209KB
MD5

47b309359d809153a5ba3d4bfee583f3
SHA1

ab70c5ca78d2738256e11851725908ceb50edc7b
SHA256

56e03d87d8e944c4c5fb0283d4e831857986db8bb10e0be842dfa4016381d7fc
SHA512

0619046e3634ab2a9ca4e3549b04f20503f5cc9bea9201131feaf01b06e7004c98085b035f46676c1a24aa92ee8bc2c6b2352cc7ccb84739682ced370183e17b
SSDEEP

6144:4+JyRdocqVbMFKzZrDAedbR8hmsFtFZvVli:LJyRGcqR5gedmXbzli

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\56e03d87d8e944c4c5fb0283d4e831857986db8bb10e0be842dfa4016381d7fc.exe
"C:\Users\Admin\AppData\Local\Temp\56e03d87d8e944c4c5fb0283d4e831857986db8bb10e0be842dfa4016381d7fc.exe"
1⤵
PID:540

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads