Analysis

  • max time kernel
    122s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 09:51

General

  • Target

    651e72d81c00aff0e556cd71cae9b6fe.exe

  • Size

    317KB

  • MD5

    651e72d81c00aff0e556cd71cae9b6fe

  • SHA1

    d0f028bce54f590f669ee11bf2a1a6c0cf03d751

  • SHA256

    1597bbca417b91aab6335fc60f546aa27f6146f7b1aa417eace67f935f3e8a25

  • SHA512

    8da5861cd0694d951bd14e704741e3a4aa02d7844ba0fbff08cf69d26e3413407ec3ebcb2965617965bc851c3dc55185ec1bb5229fe5bbe8d6558abb8d76984e

  • SSDEEP

    6144:bJIW/QrXDoeTmQxWOoZJeGiTTbnMJequuSqxRr4n:bJR/0ceaQxWOsUGYTbUeq3Sqbr4n

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\651e72d81c00aff0e556cd71cae9b6fe.exe
    "C:\Users\Admin\AppData\Local\Temp\651e72d81c00aff0e556cd71cae9b6fe.exe"
    1⤵
    • Drops file in Windows directory
    PID:2396

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2396-4-0x0000000000030000-0x0000000000031000-memory.dmp

    Filesize

    4KB

  • memory/2396-5-0x0000000000700000-0x000000000072F000-memory.dmp

    Filesize

    188KB

  • memory/2396-9-0x00000000001D0000-0x00000000001F0000-memory.dmp

    Filesize

    128KB

  • memory/2396-3-0x0000000000090000-0x0000000000091000-memory.dmp

    Filesize

    4KB

  • memory/2396-2-0x0000000000080000-0x0000000000081000-memory.dmp

    Filesize

    4KB

  • memory/2396-1-0x00000000001D0000-0x00000000001F0000-memory.dmp

    Filesize

    128KB

  • memory/2396-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/2396-17-0x00000000001D0000-0x00000000001F0000-memory.dmp

    Filesize

    128KB