14422611eb78bc00a7064fc8c662279b4b173762d17b62e372f9fa07b0bddf9e

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
07/01/2024, 07:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4855104edd97d503dcbb44da2a4b169a.exe
Size

234KB
MD5

4855104edd97d503dcbb44da2a4b169a
SHA1

f31e99aca240845c716410aecdce87ff00cb6606
SHA256

14422611eb78bc00a7064fc8c662279b4b173762d17b62e372f9fa07b0bddf9e
SHA512

30b6546a6de7481b9141f3d4a76fcefb8c0736de8af7472937acff019bf3dfe094c491387f384b5c158f8e2018367d84c00d3a17dd90455a07862c7818f8e4d1
SSDEEP

3072:YaSMvGX2gPbH1WPZBeDjyjZVOnlIZIeEiXbHbTMjTyI2YhtRzUCCU8YmvHV:Y1Mu7k3tLOeZ3EiXb7TMjIe1T2/V

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\SleepDevice.job	4855104edd97d503dcbb44da2a4b169a.exe

C:\Users\Admin\AppData\Local\Temp\4855104edd97d503dcbb44da2a4b169a.exe
"C:\Users\Admin\AppData\Local\Temp\4855104edd97d503dcbb44da2a4b169a.exe"
1⤵
- Drops file in Windows directory
PID:2300

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2300-0-0x0000000000C90000-0x0000000000CD0000-memory.dmp

Filesize
256KB

Download
memory/2300-3-0x0000000000620000-0x0000000000660000-memory.dmp

Filesize
256KB

Download
memory/2300-2-0x0000000000090000-0x00000000000D0000-memory.dmp

Filesize
256KB

Download
memory/2300-4-0x0000000000580000-0x00000000005AF000-memory.dmp

Filesize
188KB

Download