Analysis
-
max time kernel
62s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
14/09/2022, 13:52
Static task
static1
Behavioral task
behavioral1
Sample
34747a37ed1aedf329b583c7dab022c0f9c6b43683cd584ebd9a9e9e7ad0b999.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
34747a37ed1aedf329b583c7dab022c0f9c6b43683cd584ebd9a9e9e7ad0b999.exe
Resource
win10v2004-20220812-en
General
-
Target
34747a37ed1aedf329b583c7dab022c0f9c6b43683cd584ebd9a9e9e7ad0b999.exe
-
Size
2.6MB
-
MD5
8c080a96e59cfb4c550ea41535ec25e7
-
SHA1
87b0896b8fa0b239a02c570bde0fcd7ed1e59a47
-
SHA256
34747a37ed1aedf329b583c7dab022c0f9c6b43683cd584ebd9a9e9e7ad0b999
-
SHA512
45d83747e37c1155266a7eba4f4a928e3837e52c6a295dbcae1b500d5179b90f26d3571ec5cf7de2a6bedaba8376066c40bb44656833329b03047228042ca5a7
-
SSDEEP
49152:KTrVyqvdCuDeYJLQ1uDIHxcIgC6BgnWLOuo/p40gJkFp2paXscgu9HeZzA1Qwhz6:arVyqvDDecLQ6IHmnC6BgUXA4vraccvC
Malware Config
Signatures
-
Modifies registry class 3 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.key 34747a37ed1aedf329b583c7dab022c0f9c6b43683cd584ebd9a9e9e7ad0b999.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ 34747a37ed1aedf329b583c7dab022c0f9c6b43683cd584ebd9a9e9e7ad0b999.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile" 34747a37ed1aedf329b583c7dab022c0f9c6b43683cd584ebd9a9e9e7ad0b999.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 420 34747a37ed1aedf329b583c7dab022c0f9c6b43683cd584ebd9a9e9e7ad0b999.exe