3f56bcc51624926f67aa6af90507c7cba37c20fdbe8f06109bb8cf82896655e9

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25/02/2024, 16:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

XCompc.exe
Size

24KB
MD5

e28f888ec49ff180f24c477ca3446315
SHA1

4484d45b7653e07640b57e4ac9fe91ef3385f683
SHA256

5e33e701bc871198ef32e1598641e7704d7a1e74f022f924a17ee9e7ca302836
SHA512

e05bd9d3f27bbb8af0e4736030c4609fd3b7ba7a83186edac0b3fb196ac1e91a4d22e1fc28e0cdf4b583329e6caa6d571b92c828113da06708ea1a750658c681
SSDEEP

768:K6JyKB6aeBN7cie43E682+vOKv5wIzL0vo5:pB6FBNx3x8vXS5o5

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 1 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\FloatingPointProcessor	XCompc.exe

C:\Users\Admin\AppData\Local\Temp\XCompc.exe
"C:\Users\Admin\AppData\Local\Temp\XCompc.exe"
1⤵
- Enumerates system info in registry
PID:2484

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2484-0-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/2484-1-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/2484-2-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download