102b169ea9876ed343a1bffe6c032403cb82f9b525b880a7ca7ff5e1db491494

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 04:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0e9fd374895d5d73a1a4a932162b8e49.exe
Size

315KB
MD5

0e9fd374895d5d73a1a4a932162b8e49
SHA1

8c489478ee52c91d45836bfa5e942c2d3bf35644
SHA256

102b169ea9876ed343a1bffe6c032403cb82f9b525b880a7ca7ff5e1db491494
SHA512

726a3c33334381b9813f375f69efbb9190c3d78e1a9fa73c79f71fcb53c63ce671f8b8bb0844408df5a2b41283e2ab345885edeca56fd1b7e8ede2a29f44058e
SSDEEP

6144:K7eR7DIexzMf5XQAQRcdS+p9oEB26Npu0aNi7:K7I7txzyvjS+p9oEB2v0qi7

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\ReadSeed.job	0e9fd374895d5d73a1a4a932162b8e49.exe

C:\Users\Admin\AppData\Local\Temp\0e9fd374895d5d73a1a4a932162b8e49.exe
"C:\Users\Admin\AppData\Local\Temp\0e9fd374895d5d73a1a4a932162b8e49.exe"
1⤵
- Drops file in Windows directory
PID:2400

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2400-3-0x0000000000090000-0x0000000000091000-memory.dmp

Filesize
4KB

Download
memory/2400-2-0x00000000000A0000-0x00000000000C0000-memory.dmp

Filesize
128KB

Download
memory/2400-1-0x0000000000030000-0x0000000000031000-memory.dmp

Filesize
4KB

Download
memory/2400-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2400-4-0x0000000000080000-0x0000000000081000-memory.dmp

Filesize
4KB

Download
memory/2400-5-0x00000000001A0000-0x00000000001CF000-memory.dmp

Filesize
188KB

Download
memory/2400-9-0x00000000000A0000-0x00000000000C0000-memory.dmp

Filesize
128KB

Download
memory/2400-17-0x00000000000A0000-0x00000000000C0000-memory.dmp

Filesize
128KB

Download