9cf529f7b7b18504636e45393f5dbaf0f3252c1406895fe835d29eeb3ba74d4e

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 15:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

042d17de69daad8824dc13a1cb945aba.exe
Size

285KB
MD5

042d17de69daad8824dc13a1cb945aba
SHA1

1497f16cc613162469069863d381bf8d114da2f6
SHA256

9cf529f7b7b18504636e45393f5dbaf0f3252c1406895fe835d29eeb3ba74d4e
SHA512

c4fba99b32dfa11a9f1b6c4bd5159edc7dd31a20a6fb3db56ff63b0d246afe80be90bdcdda7687da06a42e87a44f5b3f2c0c190124ed68499d57ece0172a159a
SSDEEP

6144:E0vogieOLvzhDnXMeoWnV7QVSNIyEBm0S:E0vAeOLv9DnXMeoM7QUNIyEBm0S

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\FServerPro.job	042d17de69daad8824dc13a1cb945aba.exe

C:\Users\Admin\AppData\Local\Temp\042d17de69daad8824dc13a1cb945aba.exe
"C:\Users\Admin\AppData\Local\Temp\042d17de69daad8824dc13a1cb945aba.exe"
1⤵
- Drops file in Windows directory
PID:2644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2644-0-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/2644-1-0x0000000000170000-0x000000000019F000-memory.dmp

Filesize
188KB

Download
memory/2644-5-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/2644-12-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download