Analysis
-
max time kernel
41s -
max time network
51s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
30/10/2022, 21:30
Static task
static1
Behavioral task
behavioral1
Sample
411f8be5d35bc98c7447810c5abbcc7567ee965b9a7ae83fc4e9dd977a1a572a.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
411f8be5d35bc98c7447810c5abbcc7567ee965b9a7ae83fc4e9dd977a1a572a.exe
Resource
win10v2004-20220901-en
2 signatures
150 seconds
General
-
Target
411f8be5d35bc98c7447810c5abbcc7567ee965b9a7ae83fc4e9dd977a1a572a.exe
-
Size
139KB
-
MD5
a24717de59ad9247b0973fd30fdc0890
-
SHA1
dd97523e525bf8f9b9c972e049b157cf83248565
-
SHA256
411f8be5d35bc98c7447810c5abbcc7567ee965b9a7ae83fc4e9dd977a1a572a
-
SHA512
cb4a7888d53e4de20d9353de7a5d5a990ae6da993ec8198d335e472cbd650b1bc9c470a2eef84205ac2446304e86c88c38f15938a1ead6ada97535c1e60c63f0
-
SSDEEP
3072:pL/er46odCwyomuaegFM6T4xxdshTzI31zCrXlk:tT6oIFoxCI3wBk
Score
1/10
Malware Config
Signatures
-
Modifies registry class 8 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SoundRec\protocol\StdFileEditing 411f8be5d35bc98c7447810c5abbcc7567ee965b9a7ae83fc4e9dd977a1a572a.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SoundRec\protocol\StdFileEditing\server\ = "sndrec32.exe" 411f8be5d35bc98c7447810c5abbcc7567ee965b9a7ae83fc4e9dd977a1a572a.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SoundRec\protocol\StdExecute\server 411f8be5d35bc98c7447810c5abbcc7567ee965b9a7ae83fc4e9dd977a1a572a.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SoundRec 411f8be5d35bc98c7447810c5abbcc7567ee965b9a7ae83fc4e9dd977a1a572a.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SoundRec\protocol 411f8be5d35bc98c7447810c5abbcc7567ee965b9a7ae83fc4e9dd977a1a572a.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SoundRec\protocol\StdExecute 411f8be5d35bc98c7447810c5abbcc7567ee965b9a7ae83fc4e9dd977a1a572a.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SoundRec\protocol\StdExecute\server\ = "sndrec32.exe" 411f8be5d35bc98c7447810c5abbcc7567ee965b9a7ae83fc4e9dd977a1a572a.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SoundRec\protocol\StdFileEditing\server 411f8be5d35bc98c7447810c5abbcc7567ee965b9a7ae83fc4e9dd977a1a572a.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1364 411f8be5d35bc98c7447810c5abbcc7567ee965b9a7ae83fc4e9dd977a1a572a.exe