46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8

Analysis

max time kernel
167s
max time network
202s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04/10/2022, 19:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe
Size

2.5MB
MD5

ec9f337d124f164eca96ad5530ce68ae
SHA1

2916b6663d6a88e71f5e2a13b37b69f0b6407e6a
SHA256

46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8
SHA512

85e7b389e28aae7ccc7d4001c5cc5fa0a84ba1298d6c7176216195894dfe2b5a9a86077a0ce2ae108d57609bd6747ca00d3142a1a77f22c9840ba13ce8d457d5
SSDEEP

49152:P7rh44O53c5IH0fNW822P8sGguwrbARb4j26Pt+8b24Koje/9d4K6N:Hhc5MSH0fuuH2wKMpl+Oj+4K

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4732	4712	WerFault.exe	49

Modifies registry class 10 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.MyNSHandler\ = "this is my ebook"	46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E8CFC029-8420-4EAE-ADEF-915BDC77E1DC}\ProgID	46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E8CFC029-8420-4EAE-ADEF-915BDC77E1DC}\ProgID\ = "46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.MyNSHandler"	46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E8CFC029-8420-4EAE-ADEF-915BDC77E1DC}\ = "this is my ebook"	46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E8CFC029-8420-4EAE-ADEF-915BDC77E1DC}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe"	46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.MyNSHandler	46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.MyNSHandler\Clsid\ = "{E8CFC029-8420-4EAE-ADEF-915BDC77E1DC}"	46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E8CFC029-8420-4EAE-ADEF-915BDC77E1DC}	46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E8CFC029-8420-4EAE-ADEF-915BDC77E1DC}\LocalServer32	46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.MyNSHandler\Clsid	46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe

C:\Users\Admin\AppData\Local\Temp\46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe
"C:\Users\Admin\AppData\Local\Temp\46bde5bad5b38d48f7ddb7fce0104974c940a9a7dc405136e78e2ddedbabf0c8.exe"
1⤵
- Modifies registry class
PID:4712
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4712 -s 716
  2⤵
  - Program crash
  PID:4732

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4712 -ip 4712
1⤵
PID:4892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4712-132-0x0000000000400000-0x000000000070B000-memory.dmp

Filesize
3.0MB

Download
memory/4712-133-0x0000000000400000-0x000000000070B000-memory.dmp

Filesize
3.0MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads