1b9fb26f1bfa2e8bd2e2f36be4e7b1c088a7facc97e94a9ab3bcc0517c526b4d

Analysis

max time kernel
51s
max time network
53s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 03:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1b9fb26f1bfa2e8bd2e2f36be4e7b1c088a7facc97e94a9ab3bcc0517c526b4d.exe
Size 7.8MB
Sample240613-eajk6swhmm
SHA256 1b9fb26f1bfa2e8bd2e2f36be4e7b1c088a7facc97e94a9ab3bcc0517c526b4d
MD5 e992b77a0fe68f553a859268ca27afbd
SHA1 9ec4056b6a2f8a8d80cb5a83f39e85c47f0c8cb7
SHA512 37019382dc00c600f41a594dd9ca4b1632371cd02eef5ef39e63f1eeac02ad5d4d205a6a7063a74611e0d21a5d5cd81a6217805a4e5c1725f346b07bf6ec7447
SSDEEP 196608:B/mReRDQ7vhFfL189kpBeHX6WthLRvOO5Tc7ijkN9fwkh:B/mRMk7DL9vEZpxciqff
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	1b9fb26f1bfa2e8bd2e2f36be4e7b1c088a7facc97e94a9ab3bcc0517c526b4d.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	1b9fb26f1bfa2e8bd2e2f36be4e7b1c088a7facc97e94a9ab3bcc0517c526b4d.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	1b9fb26f1bfa2e8bd2e2f36be4e7b1c088a7facc97e94a9ab3bcc0517c526b4d.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion	1b9fb26f1bfa2e8bd2e2f36be4e7b1c088a7facc97e94a9ab3bcc0517c526b4d.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion	1b9fb26f1bfa2e8bd2e2f36be4e7b1c088a7facc97e94a9ab3bcc0517c526b4d.exe

C:\Users\Admin\AppData\Local\Temp\1b9fb26f1bfa2e8bd2e2f36be4e7b1c088a7facc97e94a9ab3bcc0517c526b4d.exe
"C:\Users\Admin\AppData\Local\Temp\1b9fb26f1bfa2e8bd2e2f36be4e7b1c088a7facc97e94a9ab3bcc0517c526b4d.exe"
1⤵
- Enumerates system info in registry
PID:212

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/212-1-0x0000000000400000-0x0000000001151000-memory.dmp

Download

memory/212-2-0x000000000058F000-0x0000000000802000-memory.dmp

Download

memory/212-3-0x0000000000400000-0x0000000001151000-memory.dmp

Download

memory/212-4-0x0000000000400000-0x0000000001151000-memory.dmp

Download

memory/212-5-0x0000000000400000-0x0000000001151000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads