233bff8028dc273da1b90b699c2b8c65ad12a82878aded69110356135c679e49

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 01:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0a503a7fd79db872c2ec0f61eed967e6.exe
Size

258KB
MD5

0a503a7fd79db872c2ec0f61eed967e6
SHA1

966b7ee33234c4456abddc5790194f79808a3c9a
SHA256

233bff8028dc273da1b90b699c2b8c65ad12a82878aded69110356135c679e49
SHA512

5011e02494229e585ed5af756da5cac8ff508f116ed92bba4a02a65e891420139f9cb03bc3633275ecd57ff62f015ba1e6194671ccf5bd632cf3b388b721a85a
SSDEEP

6144:NeoS/RR5HFCKggC7pHuutLa4Q4Y5MtpyW8heKEND3:cTREKggOHuELa4Q4eMtoW8cKeD3

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\iPrioritize.job	0a503a7fd79db872c2ec0f61eed967e6.exe

C:\Users\Admin\AppData\Local\Temp\0a503a7fd79db872c2ec0f61eed967e6.exe
"C:\Users\Admin\AppData\Local\Temp\0a503a7fd79db872c2ec0f61eed967e6.exe"
1⤵
- Drops file in Windows directory
PID:2060

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2060-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2060-3-0x00000000000F0000-0x00000000000F1000-memory.dmp

Filesize
4KB

Download
memory/2060-2-0x0000000000220000-0x0000000000249000-memory.dmp

Filesize
164KB

Download
memory/2060-1-0x0000000000030000-0x0000000000031000-memory.dmp

Filesize
4KB

Download
memory/2060-4-0x0000000000180000-0x0000000000181000-memory.dmp

Filesize
4KB

Download
memory/2060-5-0x0000000000270000-0x000000000029F000-memory.dmp

Filesize
188KB

Download
memory/2060-9-0x0000000000220000-0x0000000000249000-memory.dmp

Filesize
164KB

Download
memory/2060-12-0x00000000002A0000-0x00000000002C7000-memory.dmp

Filesize
156KB

Download
memory/2060-22-0x0000000000220000-0x0000000000249000-memory.dmp

Filesize
164KB

Download