231e28a92ea96ab01f592dff171d02b57c41293781416125e25246d26b266e83

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 14:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

39d89b282ab34c2a667bc92d0c48ada3.exe
Size

315KB
MD5

39d89b282ab34c2a667bc92d0c48ada3
SHA1

50b42bf54fa158598a97959847e77ffa2b1a2d43
SHA256

231e28a92ea96ab01f592dff171d02b57c41293781416125e25246d26b266e83
SHA512

7715f6972d7902ba2da91676448fb38ba63faa298876d871198265c81318709bfb2ccd0627e80aa9d1c2d67f69adb1db9c1441c84c13c3776da902075214dd70
SSDEEP

6144:Er1EP/j8eKe+EwRFo8s7dnqt26q0FbSend:EZEYRS8sRnqt26q+Oend

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\SilenceCallers.job	39d89b282ab34c2a667bc92d0c48ada3.exe

C:\Users\Admin\AppData\Local\Temp\39d89b282ab34c2a667bc92d0c48ada3.exe
"C:\Users\Admin\AppData\Local\Temp\39d89b282ab34c2a667bc92d0c48ada3.exe"
1⤵
- Drops file in Windows directory
PID:3000

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3000-4-0x0000000000140000-0x0000000000141000-memory.dmp

Filesize
4KB

Download
memory/3000-9-0x0000000000150000-0x0000000000170000-memory.dmp

Filesize
128KB

Download
memory/3000-5-0x0000000000590000-0x00000000005BF000-memory.dmp

Filesize
188KB

Download
memory/3000-3-0x0000000000130000-0x0000000000131000-memory.dmp

Filesize
4KB

Download
memory/3000-2-0x0000000000030000-0x0000000000031000-memory.dmp

Filesize
4KB

Download
memory/3000-17-0x0000000000150000-0x0000000000170000-memory.dmp

Filesize
128KB

Download
memory/3000-1-0x0000000000150000-0x0000000000170000-memory.dmp

Filesize
128KB

Download
memory/3000-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download