22e119c91c67f7a39fe705b6312c3fd867a855ab5fd957371da986a972abe495

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18/03/2024, 15:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d3d2fb00f32af067c1e8425f62e9539f.exe
Size

285KB
MD5

d3d2fb00f32af067c1e8425f62e9539f
SHA1

a11a6e5015f54b5a123f1b4f8b974f48f81a1aa7
SHA256

22e119c91c67f7a39fe705b6312c3fd867a855ab5fd957371da986a972abe495
SHA512

21addea3b9bcf50ca259d9afeba966dd7c98c38618e750688ad4874413ac31e5fd9f9d048205aa0c2260ac2213345a8816d292f40b7789a413a79e3a7c7683bd
SSDEEP

6144:yAgvIqWqSl9tXzbDAejNevM34/CQI3nq/iz3s:yA8GrbcefI6Ha/23s

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\K9Help.job	d3d2fb00f32af067c1e8425f62e9539f.exe

C:\Users\Admin\AppData\Local\Temp\d3d2fb00f32af067c1e8425f62e9539f.exe
"C:\Users\Admin\AppData\Local\Temp\d3d2fb00f32af067c1e8425f62e9539f.exe"
1⤵
- Drops file in Windows directory
PID:2612

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2612-1-0x0000000000080000-0x00000000000AF000-memory.dmp

Filesize
188KB

Download
memory/2612-7-0x0000000000700000-0x0000000000740000-memory.dmp

Filesize
256KB

Download