2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123

Analysis

max time kernel
43s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19/10/2022, 12:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
Size

314KB
MD5

a1bc051093c1c8daa76221e7be2906d0
SHA1

f12c95d0cbd63a1bd8fec5b62ce1b8540b4ef937
SHA256

2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123
SHA512

615548cd558bdcdd32d086964df2c2d3560a9e0cc27050dea4bb7ff580abb2fca1a5f788f179446879e8c2a1e20a3daf5aca6a1a30942f390f72c496d5ccf4b1
SSDEEP

6144:gNzqsZmyxkbOXUsmOg99Kc2UlxjoBCEs5pby07WRczARloSdV:gNOsZmyx4L0TUPoBC7pby07pA3oSd

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/1440-55-0x0000000001000000-0x00000000010DA000-memory.dmp	upx

Modifies registry class 13 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9F0DBE59-C479-49c5-951B-2545242FBDF6}	2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9F0DBE59-C479-49c5-951B-2545242FBDF6}\ = "ËÑ¹·µ¼º½"	2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9F0DBE59-C479-49c5-951B-2545242FBDF6}\Shell\Open\Command	2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9F0DBE59-C479-49c5-951B-2545242FBDF6}\Shell\Open	2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9F0DBE59-C479-49c5-951B-2545242FBDF6}\ShellFolder	2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9F0DBE59-C479-49c5-951B-2545242FBDF6}\ShellFolder\Attributes = 00000000	2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Microsoft.IE	2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9F0DBE59-C479-49c5-951B-2545242FBDF6}\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\desk.ico,0"	2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node	2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID	2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9F0DBE59-C479-49c5-951B-2545242FBDF6}\Shell	2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9F0DBE59-C479-49c5-951B-2545242FBDF6}\Shell\Open\Command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\IE.exe -desknav "	2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9F0DBE59-C479-49c5-951B-2545242FBDF6}\DefaultIcon	2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe

C:\Users\Admin\AppData\Local\Temp\2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe
"C:\Users\Admin\AppData\Local\Temp\2f28c5336822067ef5b48038cce078a6fd5620ee68c77b4cf2e2e647d0af9123.exe"
1⤵
- Modifies registry class
PID:1440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1440-54-0x0000000076181000-0x0000000076183000-memory.dmp

Filesize
8KB

Download
memory/1440-55-0x0000000001000000-0x00000000010DA000-memory.dmp

Filesize
872KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads