c5fba65e06b0f2cf2b412a601389ce31f26e4d01c3bd892b9e25b71c93b4286f

Analysis

max time kernel
173s
max time network
177s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
20/10/2022, 18:28

Target

c5fba65e06b0f2cf2b412a601389ce31f26e4d01c3bd892b9e25b71c93b4286f.exe
Size

61KB
MD5

81995f73bd1902d74306bcf12f5d0638
SHA1

924405dd93c1a7707246148981703586993778b6
SHA256

c5fba65e06b0f2cf2b412a601389ce31f26e4d01c3bd892b9e25b71c93b4286f
SHA512

b8167fcf57ffdf0955251414d1a388fed56862a663aaf7561e0c6d2b815c76a25e51c7c3e388fce297515742c084abfed413be16d32d04d51d20d353d1efb57b
SSDEEP

1536:8P6BdKRuVZl5WxA0+Y4mgS/h5PWCzyTj6c7Bif2ETZyFMYqVjp:U6B4RmlWxA0+Y0ojre+1TPYcp

Score

1^/10

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{14B243EA-DC4B-74DD-B4CE-567D83669B11}	c5fba65e06b0f2cf2b412a601389ce31f26e4d01c3bd892b9e25b71c93b4286f.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{14B243EA-DC4B-74DD-B4CE-567D83669B11}\ = "xqcnbkrkbbxbtevk"	c5fba65e06b0f2cf2b412a601389ce31f26e4d01c3bd892b9e25b71c93b4286f.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{14B243EA-DC4B-74DD-B4CE-567D83669B11}\LocalServer32	c5fba65e06b0f2cf2b412a601389ce31f26e4d01c3bd892b9e25b71c93b4286f.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{14B243EA-DC4B-74DD-B4CE-567D83669B11}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\c5fba65e06b0f2cf2b412a601389ce31f26e4d01c3bd892b9e25b71c93b4286f.exe"	c5fba65e06b0f2cf2b412a601389ce31f26e4d01c3bd892b9e25b71c93b4286f.exe

C:\Users\Admin\AppData\Local\Temp\c5fba65e06b0f2cf2b412a601389ce31f26e4d01c3bd892b9e25b71c93b4286f.exe
"C:\Users\Admin\AppData\Local\Temp\c5fba65e06b0f2cf2b412a601389ce31f26e4d01c3bd892b9e25b71c93b4286f.exe"
1⤵
- Modifies registry class
PID:1424

memory/1424-132-0x0000000000400000-0x0000000000425489-memory.dmp

Filesize
149KB

Download
memory/1424-133-0x00000000001E0000-0x00000000001FE000-memory.dmp

Filesize
120KB

Download
memory/1424-134-0x0000000000400000-0x0000000000425489-memory.dmp

Filesize
149KB

Download
memory/1424-135-0x00000000001E0000-0x00000000001FE000-memory.dmp

Filesize
120KB

Download