1ed7d782b11dc4d5ce31d5429d9e86dc73040fff0c7a87ad8762416b1763d09f

Analysis

max time kernel
42s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
28/10/2022, 23:39

Target

1ed7d782b11dc4d5ce31d5429d9e86dc73040fff0c7a87ad8762416b1763d09f.exe
Size

107KB
MD5

0cc978fbefc65d56cbc890616943dc60
SHA1

8ddfdf57cac7c913aac20880cbfd03b30e38a92b
SHA256

1ed7d782b11dc4d5ce31d5429d9e86dc73040fff0c7a87ad8762416b1763d09f
SHA512

f52fe33a4cd81437782901f5723411090ac79042aa18d6c1dd9bf9fc84805da4201ca8c81c6b46f5c990d31fed8e38dac93e982e4d6d108120489deeb6cd5895
SSDEEP

1536:HrYfTQKCsklf28/c6IDsyaCfcCPsKapjVrs2ryrd1vUQuqQGFNiNwc+c:1KaJIDkCfkHs2quGf9

Score

1^/10

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9BC07C78-3BF4-3A1A-08C1-C8D27B4C0602}	1ed7d782b11dc4d5ce31d5429d9e86dc73040fff0c7a87ad8762416b1763d09f.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9BC07C78-3BF4-3A1A-08C1-C8D27B4C0602}\ = "vnjrhcqewejbqzjb"	1ed7d782b11dc4d5ce31d5429d9e86dc73040fff0c7a87ad8762416b1763d09f.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9BC07C78-3BF4-3A1A-08C1-C8D27B4C0602}\LocalServer32	1ed7d782b11dc4d5ce31d5429d9e86dc73040fff0c7a87ad8762416b1763d09f.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9BC07C78-3BF4-3A1A-08C1-C8D27B4C0602}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\1ed7d782b11dc4d5ce31d5429d9e86dc73040fff0c7a87ad8762416b1763d09f.exe"	1ed7d782b11dc4d5ce31d5429d9e86dc73040fff0c7a87ad8762416b1763d09f.exe

C:\Users\Admin\AppData\Local\Temp\1ed7d782b11dc4d5ce31d5429d9e86dc73040fff0c7a87ad8762416b1763d09f.exe
"C:\Users\Admin\AppData\Local\Temp\1ed7d782b11dc4d5ce31d5429d9e86dc73040fff0c7a87ad8762416b1763d09f.exe"
1⤵
- Modifies registry class
PID:2240

memory/2240-133-0x00000000001E0000-0x00000000001FE000-memory.dmp

Filesize
120KB

Download
memory/2240-132-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download
memory/2240-134-0x00000000001E0000-0x00000000001FE000-memory.dmp

Filesize
120KB

Download