bba2082b0e96ad37b2403a40eaa87f789bef99773121c77ae5ebf94e97c4410d

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28/05/2024, 23:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bba2082b0e96ad37b2403a40eaa87f789bef99773121c77ae5ebf94e97c4410d.exe
Size

7.8MB
MD5

3af0cf62b2361145e7724460e2d5efbf
SHA1

4b1811e4c0967feb0a8682d2bd36fbd5371c7dc8
SHA256

bba2082b0e96ad37b2403a40eaa87f789bef99773121c77ae5ebf94e97c4410d
SHA512

c064a48b7bae501543764c21f010ddb813179cf9d9ee7c5fd0d62377388953449c97b61cffd630f92f280c8da4ede64663d1d9b43eaed95a75ae36c85a9dde2d
SSDEEP

196608:0hlD1TUKJTqH9FKJ6zthLRvV1r03pK7ijkN9fwkF:GlNTfeprgpwiqf/

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion	bba2082b0e96ad37b2403a40eaa87f789bef99773121c77ae5ebf94e97c4410d.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	bba2082b0e96ad37b2403a40eaa87f789bef99773121c77ae5ebf94e97c4410d.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	bba2082b0e96ad37b2403a40eaa87f789bef99773121c77ae5ebf94e97c4410d.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	bba2082b0e96ad37b2403a40eaa87f789bef99773121c77ae5ebf94e97c4410d.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion	bba2082b0e96ad37b2403a40eaa87f789bef99773121c77ae5ebf94e97c4410d.exe

C:\Users\Admin\AppData\Local\Temp\bba2082b0e96ad37b2403a40eaa87f789bef99773121c77ae5ebf94e97c4410d.exe
"C:\Users\Admin\AppData\Local\Temp\bba2082b0e96ad37b2403a40eaa87f789bef99773121c77ae5ebf94e97c4410d.exe"
1⤵
- Enumerates system info in registry
PID:5076

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5076-0-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download
memory/5076-2-0x000000000058F000-0x00000000007FE000-memory.dmp

Filesize
2.4MB

Download
memory/5076-3-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download
memory/5076-4-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download
memory/5076-5-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download