cd5904b2646239587b051f37d6999554baf9d1512546af5fe4ca6a26fc32d753

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 03:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cd5904b2646239587b051f37d6999554baf9d1512546af5fe4ca6a26fc32d753.exe
Size 6.8MB
Sample240526-ea79jaed89
SHA256 cd5904b2646239587b051f37d6999554baf9d1512546af5fe4ca6a26fc32d753
MD5 45b6d80bc32136704854ba3288d7822b
SHA1 3d98400befcee3d2f629b7fd3f41c391193f19d8
SHA512 196b60c8891e1dffa9b10a29fea460abcb575bb0d3dac1fc844f76c57239fafbd28700924623ead04b4e9325216004e45c1633bb6bfcdab90ff45a2247dd6e49
SSDEEP 98304:l8uMZ4IH5jtogBr83wLkPXoa0pdsGdO2c1SNzQMnathQCKLpq11jhLSVYWYUXm5a:qt1BggLPGUX2nthLRv2kLWYycBMBXv3
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	cd5904b2646239587b051f37d6999554baf9d1512546af5fe4ca6a26fc32d753.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	cd5904b2646239587b051f37d6999554baf9d1512546af5fe4ca6a26fc32d753.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	cd5904b2646239587b051f37d6999554baf9d1512546af5fe4ca6a26fc32d753.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion	cd5904b2646239587b051f37d6999554baf9d1512546af5fe4ca6a26fc32d753.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion	cd5904b2646239587b051f37d6999554baf9d1512546af5fe4ca6a26fc32d753.exe

C:\Users\Admin\AppData\Local\Temp\cd5904b2646239587b051f37d6999554baf9d1512546af5fe4ca6a26fc32d753.exe
"C:\Users\Admin\AppData\Local\Temp\cd5904b2646239587b051f37d6999554baf9d1512546af5fe4ca6a26fc32d753.exe"
1⤵
- Enumerates system info in registry
PID:2180

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2180-2-0x000000000058F000-0x0000000000801000-memory.dmp

Download

memory/2180-1-0x0000000000400000-0x000000000114D000-memory.dmp

Download

memory/2180-3-0x0000000000400000-0x000000000114D000-memory.dmp

Download

memory/2180-4-0x0000000000400000-0x000000000114D000-memory.dmp

Download

memory/2180-5-0x0000000000400000-0x000000000114D000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads