b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39

Analysis

max time kernel
39s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03/10/2022, 05:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe
Size

428KB
MD5

6b41495eed8492409426fe09fbe3b030
SHA1

9a345dd8ca1d9b0146ba07a4e3ce93c15768095d
SHA256

b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39
SHA512

9b15d46ea7b626d1a24bdb39fb08a832de8c6488424eb4ca75cc44ff6f03c7beaa40e8bfcc140c86471d0e881ffd3ea1c748174377deb723f0549537767b4b78
SSDEEP

12288:S5Qsosl5XMS0kUJxf8N2tFh8Y39x2YXlvuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuq:fsl0/J942t4CbXVuuuuuuuuuuuuuuuua

Score

1^/10

Malware Config

Signatures

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\shell\open	b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\DefaultIcon	b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe,1"	b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.swf	b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.spl	b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.spl\ = "ShockwaveFlash.ShockwaveFlash"	b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\shell\open\command	b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash	b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\shell	b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe\" %1"	b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.swf\ = "ShockwaveFlash.ShockwaveFlash"	b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe

C:\Users\Admin\AppData\Local\Temp\b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe
"C:\Users\Admin\AppData\Local\Temp\b78c2f26485df42abb59abb7151a928ed59c2a61ca2e6c7ad62a026b46cfaf39.exe"
1⤵
- Modifies registry class
PID:1044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1044-54-0x0000000075501000-0x0000000075503000-memory.dmp

Filesize
8KB

Download
memory/1044-55-0x0000000000400000-0x0000000000599000-memory.dmp

Filesize
1.6MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads