3f4a2e8814c111a9476b17687d267d61b526c75de3f60699e49c0260fef9532d

Analysis

max time kernel
91s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
28-10-2022 18:06

Target

3f4a2e8814c111a9476b17687d267d61b526c75de3f60699e49c0260fef9532d.exe
Size

140KB
MD5

0b3c162838129f307ca16588baffb411
SHA1

555a2b3d27b8a2dec15552ba96c90f756d0e288d
SHA256

3f4a2e8814c111a9476b17687d267d61b526c75de3f60699e49c0260fef9532d
SHA512

c3543e2f6b6a3547e7175e8e8f62d8bda3d406f42ab5d56f96bca0c043744b9ead6b3d6eabf74e538a0533723ff4860cfd1da35ecf84e9338dd86f404dbbf6a6
SSDEEP

3072:ZTWNmVmbJPsoS5FyyrJQorK9dKlBx0Af12oaxMG0Lw8:ZTWNmVcsoEQmQoriQ/GY4HYx

Score

1^/10

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell	3f4a2e8814c111a9476b17687d267d61b526c75de3f60699e49c0260fef9532d.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID	3f4a2e8814c111a9476b17687d267d61b526c75de3f60699e49c0260fef9532d.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}	3f4a2e8814c111a9476b17687d267d61b526c75de3f60699e49c0260fef9532d.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\fvuev\\command	3f4a2e8814c111a9476b17687d267d61b526c75de3f60699e49c0260fef9532d.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	3f4a2e8814c111a9476b17687d267d61b526c75de3f60699e49c0260fef9532d.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\fvuev	3f4a2e8814c111a9476b17687d267d61b526c75de3f60699e49c0260fef9532d.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\fvuev	3f4a2e8814c111a9476b17687d267d61b526c75de3f60699e49c0260fef9532d.exe

C:\Users\Admin\AppData\Local\Temp\3f4a2e8814c111a9476b17687d267d61b526c75de3f60699e49c0260fef9532d.exe
"C:\Users\Admin\AppData\Local\Temp\3f4a2e8814c111a9476b17687d267d61b526c75de3f60699e49c0260fef9532d.exe"
1⤵
- Modifies registry class
PID:3404