128dc2ab6364e2b348831d3018af4e1b91520b7550362d397667e6b5b1722c43

Analysis

max time kernel
134s
max time network
103s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
24/05/2024, 02:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

128dc2ab6364e2b348831d3018af4e1b91520b7550362d397667e6b5b1722c43.exe
Size

7.9MB
MD5

dc2fbb4e058ec36dbf0496f3b69fca15
SHA1

77ac04f13c7143f3121617cfb573baed338e6a4d
SHA256

128dc2ab6364e2b348831d3018af4e1b91520b7550362d397667e6b5b1722c43
SHA512

d82d96530fa740b1a807187e1864e2e27de01307248fb60d21c249ea884a555933474b1a92c3244ad805d0a49e86d3fb82e75cd76d2098cbde70aa33d08d8d9a
SSDEEP

196608:YT7WdqjCXiR3U6BoeYRxbqXpLo/SN+3q7ijkN9fwkR:S7WdqWXiCcLGspoiUQiqfT

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion	128dc2ab6364e2b348831d3018af4e1b91520b7550362d397667e6b5b1722c43.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	128dc2ab6364e2b348831d3018af4e1b91520b7550362d397667e6b5b1722c43.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	128dc2ab6364e2b348831d3018af4e1b91520b7550362d397667e6b5b1722c43.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	128dc2ab6364e2b348831d3018af4e1b91520b7550362d397667e6b5b1722c43.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion	128dc2ab6364e2b348831d3018af4e1b91520b7550362d397667e6b5b1722c43.exe

C:\Users\Admin\AppData\Local\Temp\128dc2ab6364e2b348831d3018af4e1b91520b7550362d397667e6b5b1722c43.exe
"C:\Users\Admin\AppData\Local\Temp\128dc2ab6364e2b348831d3018af4e1b91520b7550362d397667e6b5b1722c43.exe"
1⤵
- Enumerates system info in registry
PID:3712

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3712-0-0x0000000000400000-0x0000000001150000-memory.dmp

Filesize
13.3MB

Download
memory/3712-2-0x000000000058F000-0x0000000000802000-memory.dmp

Filesize
2.4MB

Download
memory/3712-3-0x0000000000400000-0x0000000001150000-memory.dmp

Filesize
13.3MB

Download
memory/3712-4-0x0000000000400000-0x0000000001150000-memory.dmp

Filesize
13.3MB

Download
memory/3712-5-0x0000000000400000-0x0000000001150000-memory.dmp

Filesize
13.3MB

Download