1d6561c4714fadf16bcfb244a5444a959a953424d8e2c6acca6ccb2e20117e74

Analysis

max time kernel
64s
max time network
68s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29-09-2022 14:12

Target

builder.exe
Size

469KB
MD5

c2bc344f6dde0573ea9acdfb6698bf4c
SHA1

d6ae7dc2462c8c35c4a074b0a62f07cfef873c77
SHA256

a736269f5f3a9f2e11dd776e352e1801bc28bb699e47876784b8ef761e0062db
SHA512

d60cf86c0267cd4e88d21768665bbb43f3048dace1e0013b2361c5bfabf2656ff6215dfb75b6932e09545473305b4f707c069721cdde317b1df1709cd9fc61c0
SSDEEP

12288:CzVXpdg/1MB94JD7RfaVT1hG98P67PNV3giFH6J1VjR3L6dpbQrQyEpInmwuRUfB:CzxjgdRpBq1hG98P67PNV3giFH6J1Vjn

Score

1^/10

Runs .reg file with regedit 1 IoCs

Processes:

regedit.exe

pid process

1868 regedit.exe

pid	process
1868	regedit.exe

C:\Users\Admin\AppData\Local\Temp\builder.exe
"C:\Users\Admin\AppData\Local\Temp\builder.exe"
1⤵
PID:4936

C:\Windows\regedit.exe
"regedit.exe" "C:\Users\Admin\Desktop\SuspendEnable.reg"
1⤵
- Runs .reg file with regedit
PID:1868