5623da42ae5e26d77ac8983116f2d18983afdfcdec72f5d9546ad59877dae63a

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 14:35

Target

5623da42ae5e26d77ac8983116f2d18983afdfcdec72f5d9546ad59877dae63a.exe
Size

7.4MB
MD5

488c36dc0c12cf0bb51fcaa03c49a931
SHA1

1176e36e588cfbdb220561a204fa67dc2ed7f895
SHA256

5623da42ae5e26d77ac8983116f2d18983afdfcdec72f5d9546ad59877dae63a
SHA512

25177499138fc2f2d825dbc018bf03bc39dce09bee70544dca0ae3b5d32b9004c14f3f5a1c64d495a26037906a28b5963aa55a0d0109b10a357a2b781c764235
SSDEEP

196608:z4ALthLRvE0JFIVJOTb+vUSIuLmOkFLF2WVV1MmR3:zTLpDJcJeSvU3j9xPR3

Score

1^/10

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

System Information Discovery

Processes:

5623da42ae5e26d77ac8983116f2d18983afdfcdec72f5d9546ad59877dae63a.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	5623da42ae5e26d77ac8983116f2d18983afdfcdec72f5d9546ad59877dae63a.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	5623da42ae5e26d77ac8983116f2d18983afdfcdec72f5d9546ad59877dae63a.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion	5623da42ae5e26d77ac8983116f2d18983afdfcdec72f5d9546ad59877dae63a.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion	5623da42ae5e26d77ac8983116f2d18983afdfcdec72f5d9546ad59877dae63a.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	5623da42ae5e26d77ac8983116f2d18983afdfcdec72f5d9546ad59877dae63a.exe

C:\Users\Admin\AppData\Local\Temp\5623da42ae5e26d77ac8983116f2d18983afdfcdec72f5d9546ad59877dae63a.exe
"C:\Users\Admin\AppData\Local\Temp\5623da42ae5e26d77ac8983116f2d18983afdfcdec72f5d9546ad59877dae63a.exe"
1⤵
- Enumerates system info in registry
PID:2500

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/2500-0-0x0000000000400000-0x000000000114F000-memory.dmp

Filesize
13.3MB

Download
memory/2500-2-0x000000000058F000-0x0000000000801000-memory.dmp

Filesize
2.4MB

Download
memory/2500-3-0x0000000000400000-0x000000000114F000-memory.dmp

Filesize
13.3MB

Download
memory/2500-4-0x0000000000400000-0x000000000114F000-memory.dmp

Filesize
13.3MB

Download
memory/2500-5-0x0000000000400000-0x000000000114F000-memory.dmp

Filesize
13.3MB

Download