cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 18:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe
Size

7.3MB
MD5

dca8a23dd497cb0d59243c47a6a8e37f
SHA1

8c75b6f52a9f9d4364e6babf754c1052bf3cdcec
SHA256

cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074
SHA512

0a458373c5c679b863c06fe042b8bd0435155bc1ffc18e59ea199db906f7178a5459ee02f3c6aba1edc45e443e1587254ae3b19fb9a39898ecde3eba4b1bcc46
SSDEEP

98304:dSjRH8avpYgt1uSV5je//tMGoThMH9FKJqoAVn11jhLSVYWYU0HmaDr0SQztjX6s:0hlD1TUKJTqH9FKJ6zthLRvV1r03pKW5

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 4 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion	cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe

C:\Users\Admin\AppData\Local\Temp\cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe
"C:\Users\Admin\AppData\Local\Temp\cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe"
1⤵
- Enumerates system info in registry
PID:1848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1848-2-0x000000000058F000-0x00000000007FE000-memory.dmp

Filesize
2.4MB

Download
memory/1848-1-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download
memory/1848-3-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download