aa70e015254b4baae5c9c2b281e2968aa53bf52d4f7e0d057f6b7312b5b741a1

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 20:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

10b6943e9c12f21189309b3dc2802106.exe
Size

297KB
MD5

10b6943e9c12f21189309b3dc2802106
SHA1

67481cc6da0ff01aef83d594332cce56a58fa713
SHA256

aa70e015254b4baae5c9c2b281e2968aa53bf52d4f7e0d057f6b7312b5b741a1
SHA512

40f7c7b6f98d77ba9ac820c97c5917a553ae637d38df3e1010c93352aecd73d03c56372addedfa904b774dafa026d02125b736e2a945579900acf2e0e7b51f7d
SSDEEP

6144:YbxubikKpOtYDsTrIe2srRaZlEPx95VHncjviu:Y8U4aDs3i6IDcxTVmviu

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\ControlMaster.job	10b6943e9c12f21189309b3dc2802106.exe

C:\Users\Admin\AppData\Local\Temp\10b6943e9c12f21189309b3dc2802106.exe
"C:\Users\Admin\AppData\Local\Temp\10b6943e9c12f21189309b3dc2802106.exe"
1⤵
- Drops file in Windows directory
PID:2380

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2380-0-0x0000000000F00000-0x0000000000F40000-memory.dmp

Filesize
256KB

Download
memory/2380-2-0x00000000001C0000-0x0000000000200000-memory.dmp

Filesize
256KB

Download
memory/2380-1-0x0000000000840000-0x0000000000880000-memory.dmp

Filesize
256KB

Download
memory/2380-4-0x00000000000F0000-0x000000000011F000-memory.dmp

Filesize
188KB

Download