Overview

overview

1

Static

static

reg1aid64.exe

windows7-x64

1

reg1aid64.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    108s
  • max time network
    114s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    07-10-2022 21:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    reg1aid64.exe

  • Size

    5.2MB

  • MD5

    604a6d99988632bcfc668d1d7e650d0a

  • SHA1

    4d7db7f1d26d8cfe421f6d4c55746efeab722ada

  • SHA256

    6ed462f41d76e596a8e1228715be7b398dd1e7a2249190dc59ee2103d5168493

  • SHA512

    42153b3804c285be2b9c1878e24fab6a43d3a26a2a410d8d00d4a1c8774b526e0dd9e8975d8ded2618d4bc447b5717e5b4312de1e6be3cbbe59843defeb01a4a

  • SSDEEP

    49152:leGBihv7QzctB2mm0Cx8JODbZs7ItQARvowCoGGL7bD+eRmqU4Ro:l7BihviolS8Ube8tP62Uf

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\reg1aid64.exe
    "C:\Users\Admin\AppData\Local\Temp\reg1aid64.exe"
    1⤵
      PID:1476
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:112
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x2f4
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:1488

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1476-54-0x000007FEFC311000-0x000007FEFC313000-memory.dmp

        Filesize

        8KB

        Download