afe57674c53de398de18be61175e7cf55447e9c57cd3b4c82b035a9d65ec86f3 | Triage™

Analysis

max time kernel
119s
max time network
117s
platform
windows10_x64
resource
win10
submitted
19/07/2020, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
zeusaes_2.9.5.1.vir.exe
Size 359KB
Sample200719-frk5v5ay1e
SHA256 afe57674c53de398de18be61175e7cf55447e9c57cd3b4c82b035a9d65ec86f3
MD5 1f0d255ad2996e3f4b5ea1202568ec67
SHA1 6092541a5fc6941ae98acc64024ee7e9fbb96a57
SHA512 aa027325045f63f59e097b4b91e455475a57f5ad1fcced767b2628764cee9a00869cfca4a23225fddc62f2850ddd59209c86fe9d2a560eafd5fb58660d5bc605
MD5 SHA1 SHA512

Score

7^/10

Malware Config

Signatures

Modifies registry class 3 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile"	zeusaes_2.9.5.1.vir.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.key	zeusaes_2.9.5.1.vir.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\	zeusaes_2.9.5.1.vir.exe

Loads dropped DLL 1 IoCs

pid	Process
3876	zeusaes_2.9.5.1.vir.exe

C:\Users\Admin\AppData\Local\Temp\zeusaes_2.9.5.1.vir.exe
"C:\Users\Admin\AppData\Local\Temp\zeusaes_2.9.5.1.vir.exe"
1⤵
- Modifies registry class
- Loads dropped DLL
PID:3876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads