8636e970d29f568826921909d53f7da7f73260722321c8a933138ee526fdcf2b

Analysis

max time kernel
182s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24-12-2023 14:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

016cae166319180ca724044529e1f9e3.exe
Size

23KB
MD5

016cae166319180ca724044529e1f9e3
SHA1

3fb37e82f0aa02c2cd2b382b8c2101badd20cc60
SHA256

8636e970d29f568826921909d53f7da7f73260722321c8a933138ee526fdcf2b
SHA512

3a800d7ed344c73bfdfa8c0c4c61970915f8e2e96e80a718241b15ccadb546451858be39979248a180a2b2a545773f566926ede7a11d5982534525331283113d
SSDEEP

384:D8riF4yB54E0U8oKPFSwwGTLXgf7kf+evLxHhcFna5/bl76M41KJ49oNncx4MXvU:D885OyKMwwGvX3fJHx/bIVicK04M8

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Advanced DHTML Enable = "C:\\Users\\Admin\\AppData\\Local\\Temp\\016cae166319180ca724044529e1f9e3.exe"	016cae166319180ca724044529e1f9e3.exe

C:\Users\Admin\AppData\Local\Temp\016cae166319180ca724044529e1f9e3.exe
"C:\Users\Admin\AppData\Local\Temp\016cae166319180ca724044529e1f9e3.exe"
1⤵
- Adds Run key to start application
PID:2908

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2908-0-0x0000000000400000-0x00000000004A8986-memory.dmp

Filesize
674KB

Download
memory/2908-1-0x0000000000400000-0x00000000004A8986-memory.dmp

Filesize
674KB

Download
memory/2908-2-0x0000000000400000-0x00000000004A8986-memory.dmp

Filesize
674KB

Download
memory/2908-12-0x0000000000400000-0x00000000004A8986-memory.dmp

Filesize
674KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads