423ec928941b9a03ec6c7636d94be4ae27fb7d6ff6389f015b9607d4f4bdc53b

Analysis

max time kernel
36s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19-10-2022 23:03

Target

423ec928941b9a03ec6c7636d94be4ae27fb7d6ff6389f015b9607d4f4bdc53b.exe
Size

144KB
MD5

a10fad3726ad3ef00bce66c181272060
SHA1

ac90dca63947a8581f762add8cb48417d796e85b
SHA256

423ec928941b9a03ec6c7636d94be4ae27fb7d6ff6389f015b9607d4f4bdc53b
SHA512

6fce8dbfa710c054d1bc9a8766bf925ccea2ef2c45050932ed73f97464daf1260f8ee700788647ea2f09af2572e5260d0c9fe87b4ae859fff5ca34ba0f0f5f28
SSDEEP

3072:xp43sucJG8+pU6HQ3Ej58zHP1/CQuoQCafg7cRxXHws0:PCTQ6H5jWpuoRLcRxgs0

Score

1^/10

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell	423ec928941b9a03ec6c7636d94be4ae27fb7d6ff6389f015b9607d4f4bdc53b.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID	423ec928941b9a03ec6c7636d94be4ae27fb7d6ff6389f015b9607d4f4bdc53b.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}	423ec928941b9a03ec6c7636d94be4ae27fb7d6ff6389f015b9607d4f4bdc53b.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\cyrmq\\command	423ec928941b9a03ec6c7636d94be4ae27fb7d6ff6389f015b9607d4f4bdc53b.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node	423ec928941b9a03ec6c7636d94be4ae27fb7d6ff6389f015b9607d4f4bdc53b.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\cyrmq	423ec928941b9a03ec6c7636d94be4ae27fb7d6ff6389f015b9607d4f4bdc53b.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\cyrmq	423ec928941b9a03ec6c7636d94be4ae27fb7d6ff6389f015b9607d4f4bdc53b.exe

C:\Users\Admin\AppData\Local\Temp\423ec928941b9a03ec6c7636d94be4ae27fb7d6ff6389f015b9607d4f4bdc53b.exe
"C:\Users\Admin\AppData\Local\Temp\423ec928941b9a03ec6c7636d94be4ae27fb7d6ff6389f015b9607d4f4bdc53b.exe"
1⤵
- Modifies registry class
PID:1928