233cd6fb51ddf0414d0cec94ffa7b5651ed045bf6a58bce2e729cc1c44802473

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
07/01/2024, 14:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4929b6153902217929db0cd4c2c521f4.exe
Size

220KB
MD5

4929b6153902217929db0cd4c2c521f4
SHA1

41e0995f109a5c551ea25d666f4d22287e56c3ad
SHA256

233cd6fb51ddf0414d0cec94ffa7b5651ed045bf6a58bce2e729cc1c44802473
SHA512

468eabd623d55c18dcd3e79ae48aacdf84de993ca4e84957a2cf1aedd9f0240bc49215dc0f463e6b623e6ce506968aeeee881b32f1bf3d4abe0af23ae1d336d6
SSDEEP

6144:3eBXgpHAs4JnhzfyWCKVbAY6+aftSCQ6lB2ju9ANvlj:OAHQnmWCKVbAY6+MnRlojsANvlj

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\ScheduleFast.job	4929b6153902217929db0cd4c2c521f4.exe

C:\Users\Admin\AppData\Local\Temp\4929b6153902217929db0cd4c2c521f4.exe
"C:\Users\Admin\AppData\Local\Temp\4929b6153902217929db0cd4c2c521f4.exe"
1⤵
- Drops file in Windows directory
PID:2500

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2500-3-0x0000000000130000-0x0000000000131000-memory.dmp

Filesize
4KB

Download
memory/2500-2-0x0000000000030000-0x0000000000031000-memory.dmp

Filesize
4KB

Download
memory/2500-4-0x0000000000140000-0x0000000000141000-memory.dmp

Filesize
4KB

Download
memory/2500-1-0x0000000000150000-0x0000000000170000-memory.dmp

Filesize
128KB

Download
memory/2500-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2500-5-0x0000000000190000-0x00000000001BF000-memory.dmp

Filesize
188KB

Download
memory/2500-9-0x0000000000150000-0x0000000000170000-memory.dmp

Filesize
128KB

Download
memory/2500-17-0x0000000000150000-0x0000000000170000-memory.dmp

Filesize
128KB

Download