cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 18:22

Target

cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe
Size

7.3MB
MD5

dca8a23dd497cb0d59243c47a6a8e37f
SHA1

8c75b6f52a9f9d4364e6babf754c1052bf3cdcec
SHA256

cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074
SHA512

0a458373c5c679b863c06fe042b8bd0435155bc1ffc18e59ea199db906f7178a5459ee02f3c6aba1edc45e443e1587254ae3b19fb9a39898ecde3eba4b1bcc46
SSDEEP

98304:dSjRH8avpYgt1uSV5je//tMGoThMH9FKJqoAVn11jhLSVYWYU0HmaDr0SQztjX6s:0hlD1TUKJTqH9FKJ6zthLRvV1r03pKW5

Score

1^/10

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

System Information Discovery

Processes:

cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion	cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion	cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe

C:\Users\Admin\AppData\Local\Temp\cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe
"C:\Users\Admin\AppData\Local\Temp\cc85627980f59aabd478c510b6fc76eb501001d8e3a9862d9bf1520635a1e074.exe"
1⤵
- Enumerates system info in registry
PID:3948

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

memory/3948-2-0x000000000058F000-0x00000000007FE000-memory.dmp

Filesize
2.4MB

Download
memory/3948-1-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download
memory/3948-3-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download
memory/3948-4-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download
memory/3948-5-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download