63dce372419c144007b297d5e1cf6067d69dc85d3e3fa80c5fe2d93c87570854 | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
04/05/2024, 14:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

63dce372419c144007b297d5e1cf6067d69dc85d3e3fa80c5fe2d93c87570854.exe
Size

3.6MB
MD5

68fcdc88a649223620801db8a14c1182
SHA1

b052afe3af7d113ed2dbd3d6d1db273a1bc25e88
SHA256

63dce372419c144007b297d5e1cf6067d69dc85d3e3fa80c5fe2d93c87570854
SHA512

7ca637dbb02cec3ab9033ad65134a40593ada5c160b0c34c6a293fe010ef68c1bee91ba43f9c49f0eb58771e7c9f730c9d0c9effa8cc9e8dbb7f0773d9971e71
SSDEEP

98304:M6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwww+:OWhn

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\63dce372419c144007b297d5e1cf6067d69dc85d3e3fa80c5fe2d93c87570854.exe
"C:\Users\Admin\AppData\Local\Temp\63dce372419c144007b297d5e1cf6067d69dc85d3e3fa80c5fe2d93c87570854.exe"
1⤵
PID:2252

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2252-5-0x0000000000230000-0x0000000000297000-memory.dmp

Filesize
412KB

Download
memory/2252-0-0x0000000000230000-0x0000000000297000-memory.dmp

Filesize
412KB

Download
memory/2252-11-0x0000000000400000-0x0000000000824000-memory.dmp

Filesize
4.1MB

Download
memory/2252-10-0x0000000000400000-0x0000000000824000-memory.dmp

Filesize
4.1MB

Download
memory/2252-7-0x0000000000400000-0x0000000000824000-memory.dmp

Filesize
4.1MB

Download
memory/2252-12-0x0000000000400000-0x0000000000824000-memory.dmp

Filesize
4.1MB

Download