4e866ff7b48da704e0a9142cefdb08b2933c0e694b99e8e00ad113174b7d2ceb

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12/07/2024, 03:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4e866ff7b48da704e0a9142cefdb08b2933c0e694b99e8e00ad113174b7d2ceb.exe
Size

7.3MB
MD5

4602bc531bfd8c87d9b19f8e9acfdbef
SHA1

1e6f0d74ad459cd889ffc145be51700a8ecac65b
SHA256

4e866ff7b48da704e0a9142cefdb08b2933c0e694b99e8e00ad113174b7d2ceb
SHA512

9c7022d0c32039fc1fca3d8900cb82c846e7d015a2d553a7f6f7a0b07afac66bf7904edc1a752714d8bd7717cac9e0a514a25e021e82a0a6ab11737978e74710
SSDEEP

196608:0hlD1TUKJTqH9FKJ6zthLRvV1r03pKsQgG:GlNTfeprgpI

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	4e866ff7b48da704e0a9142cefdb08b2933c0e694b99e8e00ad113174b7d2ceb.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	4e866ff7b48da704e0a9142cefdb08b2933c0e694b99e8e00ad113174b7d2ceb.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	4e866ff7b48da704e0a9142cefdb08b2933c0e694b99e8e00ad113174b7d2ceb.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion	4e866ff7b48da704e0a9142cefdb08b2933c0e694b99e8e00ad113174b7d2ceb.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion	4e866ff7b48da704e0a9142cefdb08b2933c0e694b99e8e00ad113174b7d2ceb.exe

C:\Users\Admin\AppData\Local\Temp\4e866ff7b48da704e0a9142cefdb08b2933c0e694b99e8e00ad113174b7d2ceb.exe
"C:\Users\Admin\AppData\Local\Temp\4e866ff7b48da704e0a9142cefdb08b2933c0e694b99e8e00ad113174b7d2ceb.exe"
1⤵
- Enumerates system info in registry
PID:1644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1644-0-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download
memory/1644-3-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download
memory/1644-2-0x000000000058F000-0x00000000007FE000-memory.dmp

Filesize
2.4MB

Download
memory/1644-4-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download
memory/1644-5-0x0000000000400000-0x0000000001149000-memory.dmp

Filesize
13.3MB

Download