122737ef9e579f908c7a58f25a55d76ac9bb171b879ed4b55cb7a4265e32c2b7

Analysis

max time kernel
140s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
04/07/2024, 22:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

122737ef9e579f908c7a58f25a55d76ac9bb171b879ed4b55cb7a4265e32c2b7.exe
Size

165KB
MD5

8e6872dfb57f5fa4e3487c110ec6f6f0
SHA1

246e85a7fd2c0a2926acc18b1ddd173eb92be7d6
SHA256

122737ef9e579f908c7a58f25a55d76ac9bb171b879ed4b55cb7a4265e32c2b7
SHA512

4fa43889f710e3b27b4c7844217a569ac981b00060558f86e1fc131d1a2dc89ef01da6a0baf00901f30f9c1417e0f27c6b9826f920ca7dd756b118f78d98d33e
SSDEEP

3072:Be761+A0HWkOgxJPoJWIo869iJMh/MMkM:o7SC6r5KZh/MM5

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2236	122737ef9e579f908c7a58f25a55d76ac9bb171b879ed4b55cb7a4265e32c2b7.exe

Suspicious behavior: RenamesItself 2 IoCs

pid	Process
2236	122737ef9e579f908c7a58f25a55d76ac9bb171b879ed4b55cb7a4265e32c2b7.exe
2236	122737ef9e579f908c7a58f25a55d76ac9bb171b879ed4b55cb7a4265e32c2b7.exe

C:\Users\Admin\AppData\Local\Temp\122737ef9e579f908c7a58f25a55d76ac9bb171b879ed4b55cb7a4265e32c2b7.exe
"C:\Users\Admin\AppData\Local\Temp\122737ef9e579f908c7a58f25a55d76ac9bb171b879ed4b55cb7a4265e32c2b7.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: RenamesItself
PID:2236

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\aiw259410318.ico

Filesize
326B

MD5
3c4d084719ab4dcdd1bd11042e53efc4

SHA1
fd8c8a5c4c49cd4ecd6acd6327860e771bac0ab6

SHA256
3572a6302c3d316e713d4ac42fa66d0c0e3b91434654793b9d772fef76599d4c

SHA512
a8e463131f6b0e198b6aea80b24f3362bdb2a4d9d5350d80a7d7b6278eda716488b493895a6c5dfe4bcc201a8c4c18c0499eb492e53e25dcd78980d156b693e8

Download Submit
memory/2236-15-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download