ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06

Analysis

max time kernel
134s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 03:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06.exe
Size 7.9MB
Sample240526-edkyeaee87
SHA256 ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06
MD5 5d500d4975d8538326991286a8c23aea
SHA1 1a846f6ecde64611c01129200ff951b694e1f0a6
SHA512 61bfdf8157ad0cd0684cfeb7c1d54574baf5438d2e50d981a85de2fa118041211f98a3f33fa661b46fc1272ae7115996f2709a78b374833e5debc5776bfa0358
SSDEEP 196608:0hlD1TUKJTqH9FKJ6zthLRvV1r03pKXg6El:GlNTfeprgpsgrl
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion	ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion	ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06.exe

C:\Users\Admin\AppData\Local\Temp\ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06.exe
"C:\Users\Admin\AppData\Local\Temp\ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06.exe"
1⤵
- Enumerates system info in registry
PID:2440

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=1308,i,6593821857742176458,13646536021844995125,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
1⤵
PID:2688

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2440-2-0x000000000058F000-0x00000000007FE000-memory.dmp

Download

memory/2440-0-0x0000000000400000-0x0000000001149000-memory.dmp

Download

memory/2440-3-0x0000000000400000-0x0000000001149000-memory.dmp

Download

memory/2440-4-0x0000000000400000-0x0000000001149000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads