97817fae9da18cd45ad455fe1609ac5190cb8acb7bffeb950e1098ef0f96b5bb

Analysis

max time kernel
97s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
03-10-2022 14:01

Target

97817fae9da18cd45ad455fe1609ac5190cb8acb7bffeb950e1098ef0f96b5bb.exe
Size

140KB
MD5

436dc51a6b2d6fdee3dd0019c250a116
SHA1

b5bfad64814bd5a7c0419028a3b3bda96cad2b5a
SHA256

97817fae9da18cd45ad455fe1609ac5190cb8acb7bffeb950e1098ef0f96b5bb
SHA512

c62c7011d2872441de56357e330a158b95bfc231e90ba42b696e71187aedab5841b726cfc0e7b054b452f1213299a3c64a80ac0d363405d31fbf9e0c2449ac60
SSDEEP

1536:ZNUfNlmp5LcpltG/JLZ0MVIrdIaf3y+3D8tKo8V7XjxGLDgOXDb9XBz1rt7:Z+WXYtG/J9wdDfy+cg7zkgMd3rt7

Score

1^/10

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\efazd	97817fae9da18cd45ad455fe1609ac5190cb8acb7bffeb950e1098ef0f96b5bb.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell	97817fae9da18cd45ad455fe1609ac5190cb8acb7bffeb950e1098ef0f96b5bb.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID	97817fae9da18cd45ad455fe1609ac5190cb8acb7bffeb950e1098ef0f96b5bb.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}	97817fae9da18cd45ad455fe1609ac5190cb8acb7bffeb950e1098ef0f96b5bb.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\efazd\\command	97817fae9da18cd45ad455fe1609ac5190cb8acb7bffeb950e1098ef0f96b5bb.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	97817fae9da18cd45ad455fe1609ac5190cb8acb7bffeb950e1098ef0f96b5bb.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\efazd	97817fae9da18cd45ad455fe1609ac5190cb8acb7bffeb950e1098ef0f96b5bb.exe

C:\Users\Admin\AppData\Local\Temp\97817fae9da18cd45ad455fe1609ac5190cb8acb7bffeb950e1098ef0f96b5bb.exe
"C:\Users\Admin\AppData\Local\Temp\97817fae9da18cd45ad455fe1609ac5190cb8acb7bffeb950e1098ef0f96b5bb.exe"
1⤵
- Modifies registry class
PID:5024