120569057587184e50c2e5f44831f58d5c0f7a54341c50882561a7af6b5e8c54

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26/01/2024, 19:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

783e46f3af706edd9278ae6588140ec8.exe
Size

316KB
MD5

783e46f3af706edd9278ae6588140ec8
SHA1

51319b129024970020c1d4ebf0b395b1932ca3fb
SHA256

120569057587184e50c2e5f44831f58d5c0f7a54341c50882561a7af6b5e8c54
SHA512

6110dc9dd24146cea31a19d0b863e8e699313b9a019f644c8393b91edc8b2b59906dc24cd767662ac446110954ac00ef4ab7ad2fcd7a3a91b85d9a332fce3823
SSDEEP

6144:mhynu8LzBpJzuimZwXiUPmrIpLdMOwPBmPR5v/T3fIsZ+Rxis5:Gb8LlqwXiUHdwJob/T3Qsexis5

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\TextraPack.job	783e46f3af706edd9278ae6588140ec8.exe

C:\Users\Admin\AppData\Local\Temp\783e46f3af706edd9278ae6588140ec8.exe
"C:\Users\Admin\AppData\Local\Temp\783e46f3af706edd9278ae6588140ec8.exe"
1⤵
- Drops file in Windows directory
PID:1936

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1936-3-0x0000000000F20000-0x0000000000F21000-memory.dmp

Filesize
4KB

Download
memory/1936-4-0x0000000000030000-0x0000000000031000-memory.dmp

Filesize
4KB

Download
memory/1936-2-0x0000000000700000-0x0000000000701000-memory.dmp

Filesize
4KB

Download
memory/1936-1-0x0000000000F30000-0x0000000000F50000-memory.dmp

Filesize
128KB

Download
memory/1936-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/1936-5-0x0000000000FD0000-0x0000000000FFF000-memory.dmp

Filesize
188KB

Download
memory/1936-9-0x0000000000F30000-0x0000000000F50000-memory.dmp

Filesize
128KB

Download
memory/1936-17-0x0000000000F30000-0x0000000000F50000-memory.dmp

Filesize
128KB

Download