ef64104a245801727e794f870e4b2d17511b710b2aa54cb3586ac6a8e1c3de40

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 15:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ef64104a245801727e794f870e4b2d17511b710b2aa54cb3586ac6a8e1c3de40.exe
Size

7.9MB
MD5

4f9b7ba8271592cd707a2d116c86cff3
SHA1

552ecb250baee0fa1ed0c2ad151d902928c17e96
SHA256

ef64104a245801727e794f870e4b2d17511b710b2aa54cb3586ac6a8e1c3de40
SHA512

2021a304ac20bdb125360a48b47d5f282dd3234f91954419f43f6e78eb4eb95ae5840de64eb6e5063c5ec1b7a06596b817793bc52fd3ee3063da40f87d36cee0
SSDEEP

98304:dSjRH8avpYgt1uSV5je//tMGoThMH9FKJqoAVn11jhLSVYWYU0HmaDr0SQztjX6x:0hlD1TUKJTqH9FKJ6zthLRvV1r03pK3P

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 4 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	ef64104a245801727e794f870e4b2d17511b710b2aa54cb3586ac6a8e1c3de40.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	ef64104a245801727e794f870e4b2d17511b710b2aa54cb3586ac6a8e1c3de40.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion	ef64104a245801727e794f870e4b2d17511b710b2aa54cb3586ac6a8e1c3de40.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	ef64104a245801727e794f870e4b2d17511b710b2aa54cb3586ac6a8e1c3de40.exe

C:\Users\Admin\AppData\Local\Temp\ef64104a245801727e794f870e4b2d17511b710b2aa54cb3586ac6a8e1c3de40.exe
"C:\Users\Admin\AppData\Local\Temp\ef64104a245801727e794f870e4b2d17511b710b2aa54cb3586ac6a8e1c3de40.exe"
1⤵
- Enumerates system info in registry
PID:2240

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2240-3-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download
memory/2240-2-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download
memory/2240-4-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download
memory/2240-5-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download