15ffc3624d10e7c069b217e47dd80d7b300edf0cef0d4ec96212c21f503278a8

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13-02-2024 03:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

98645394f8c9c48dd16b78ef5445cab8.exe
Size

208KB
MD5

98645394f8c9c48dd16b78ef5445cab8
SHA1

32a4c30ad47c1cec5be4910fa9df0f0a8ac083fa
SHA256

15ffc3624d10e7c069b217e47dd80d7b300edf0cef0d4ec96212c21f503278a8
SHA512

a187279c1b405286355754246506ecad384ec447e80065215bb7611fe9a0ab6cd33de64fe4207812acb4482dadd3a7cb1eadc7a1417891b24a484e46b0e5f54c
SSDEEP

3072:TQhkXUwnQv1JqWPZBeyjfleVzxPoMhW6FjaQJjaNLEsQ+UO:TQhkDQ73TEgt6zZaesQ+UO

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\FitSitter.job	98645394f8c9c48dd16b78ef5445cab8.exe

C:\Users\Admin\AppData\Local\Temp\98645394f8c9c48dd16b78ef5445cab8.exe
"C:\Users\Admin\AppData\Local\Temp\98645394f8c9c48dd16b78ef5445cab8.exe"
1⤵
- Drops file in Windows directory
PID:2376

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2376-0-0x00000000001B0000-0x00000000001F0000-memory.dmp

Filesize
256KB

Download
memory/2376-2-0x0000000000730000-0x0000000000770000-memory.dmp

Filesize
256KB

Download
memory/2376-3-0x0000000000080000-0x00000000000AF000-memory.dmp

Filesize
188KB

Download