235f1f937b549781c6007ad09ba6624a631b46fcf2db60cda86b57bf2eea61cb

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 20:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

11d01eb97d264f4e5b728839f305fa64.exe
Size

287KB
MD5

11d01eb97d264f4e5b728839f305fa64
SHA1

d7b0fb1b66d8c54537f508990c5c05d50aef89a5
SHA256

235f1f937b549781c6007ad09ba6624a631b46fcf2db60cda86b57bf2eea61cb
SHA512

30e522bed580f19c352481d542bce818418aeefdbdaca4df9deac0da5be3921fa25b0139994fabec632cc94f92a012a2684c23904e2103b458e443f55aca30b2
SSDEEP

6144:L5INjuL/qKE2ubO8Rk9wlA23E5JVpzMtfEA5:F6w/q1Nk9SA26VpSfEA5

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\PasswordChain.job	11d01eb97d264f4e5b728839f305fa64.exe

C:\Users\Admin\AppData\Local\Temp\11d01eb97d264f4e5b728839f305fa64.exe
"C:\Users\Admin\AppData\Local\Temp\11d01eb97d264f4e5b728839f305fa64.exe"
1⤵
- Drops file in Windows directory
PID:2284

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2284-1-0x0000000000220000-0x0000000000260000-memory.dmp

Filesize
256KB

Download
memory/2284-2-0x00000000000F0000-0x000000000011F000-memory.dmp

Filesize
188KB

Download