92bf852ed6eb59e03746d48f4dca69848e77b7bd6a00fed2f891cf50a320d2bf

Analysis

max time kernel
51s
max time network
53s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 03:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
92bf852ed6eb59e03746d48f4dca69848e77b7bd6a00fed2f891cf50a320d2bf.exe
Size 7.8MB
Sample240613-eahzmswhml
SHA256 92bf852ed6eb59e03746d48f4dca69848e77b7bd6a00fed2f891cf50a320d2bf
MD5 a7fcbacdf6c2ed84de7c3e0d3fb61493
SHA1 d7827c35d65b0ceb4c5ce0abeb6ba95ef7c3af58
SHA512 13283a478066de1858ad3098caede0e979e7d7bf1dd1e6d8f80e65b22dbe2bd2ab49092bb0b6294d6bf275523fc0652e2ee2c544028dba8e1811ce461eafdd01
SSDEEP 196608:B/mReRDQ7vhFfL189kpBeHX6WthLRvOO5Tc7ijkN9fwkb:B/mRMk7DL9vEZpxciqfh
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	92bf852ed6eb59e03746d48f4dca69848e77b7bd6a00fed2f891cf50a320d2bf.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion	92bf852ed6eb59e03746d48f4dca69848e77b7bd6a00fed2f891cf50a320d2bf.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion	92bf852ed6eb59e03746d48f4dca69848e77b7bd6a00fed2f891cf50a320d2bf.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	92bf852ed6eb59e03746d48f4dca69848e77b7bd6a00fed2f891cf50a320d2bf.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	92bf852ed6eb59e03746d48f4dca69848e77b7bd6a00fed2f891cf50a320d2bf.exe

C:\Users\Admin\AppData\Local\Temp\92bf852ed6eb59e03746d48f4dca69848e77b7bd6a00fed2f891cf50a320d2bf.exe
"C:\Users\Admin\AppData\Local\Temp\92bf852ed6eb59e03746d48f4dca69848e77b7bd6a00fed2f891cf50a320d2bf.exe"
1⤵
- Enumerates system info in registry
PID:1508

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1508-2-0x000000000058F000-0x0000000000802000-memory.dmp

Download

memory/1508-1-0x0000000000400000-0x0000000001151000-memory.dmp

Download

memory/1508-3-0x0000000000400000-0x0000000001151000-memory.dmp

Download

memory/1508-4-0x0000000000400000-0x0000000001151000-memory.dmp

Download

memory/1508-5-0x0000000000400000-0x0000000001151000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads