e6376ab5246a8874a469b2e4c10d0325f3e664b55f90980e14e192a9e4c3c0a3 | Triage

Analysis

max time kernel
117s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
21-05-2024 12:19

Sharing

Report Analysis Logs

General

Target

BMF.exe
Size

22KB
MD5

70a61a711113f673bf8349d01ffbe6be
SHA1

e7f771b349d8cdd51e015bceb34317dac947756a
SHA256

5f2418afecede066b1ae30a16bb55954499e04378c56bb2bfb99aa68e0fd7419
SHA512

2402eaf882ca06508abf494df6078b398afea5b2613c87543bb51aa8c5e1d2ba696770b8a42b549f555e351f7931acec7b6f3293c4355e35722335475666b9cd
SSDEEP

384:u/DA+FuIF/dOvmwszF/FNFzFzFyFwF1FwsFjnFN6FcF0gvwsf2aoCrRqC:uDXPzF/FNFzFzFyFwF1FJjnFN6FcF0YB

Score

1^/10

Malware Config

Signatures

Modifies data under HKEY_USERS 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE	BMF.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Cygnus Solutions	BMF.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Cygnus Solutions\Cygwin	BMF.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2	BMF.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Cygnus Solutions\Cygwin\Program Options	BMF.exe

C:\Users\Admin\AppData\Local\Temp\BMF.exe
"C:\Users\Admin\AppData\Local\Temp\BMF.exe"
1⤵
- Modifies data under HKEY_USERS
PID:2692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2692-0-0x0000000061000000-0x0000000061259000-memory.dmp

Filesize
2.3MB

Download
memory/2692-1-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/2692-3-0x0000000061000000-0x0000000061259000-memory.dmp

Filesize
2.3MB

Download