f2670b7b4eb2d6bc68182490dae01f936d5f0b148094381ee2d64ba416f7b199

Analysis

max time kernel
91s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07/11/2022, 09:29

Target

f2670b7b4eb2d6bc68182490dae01f936d5f0b148094381ee2d64ba416f7b199.exe
Size

136KB
MD5

0220f073b6bfa8188a94bceee3fff2f5
SHA1

b23bb37ef2805d127f73678e9be97256bd73b1ee
SHA256

f2670b7b4eb2d6bc68182490dae01f936d5f0b148094381ee2d64ba416f7b199
SHA512

61c851997292da942c87545f35f04eb135c03366aa5cfcd48aac88144f62a2eed0265e449ab122fca340bcb5090d8e9acd8436be6c5a7ba78aaacf699c3a3f89
SSDEEP

1536:D3xcwVajWszwJmF+tL6F1670eeBOS3W6TZdBE/Ur4aJVHo47KfOmsKRqW2L1tLuD:DQiSwJN66zEO9Id2647BfOmsW2Ls

Score

1^/10

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\qiyxz	f2670b7b4eb2d6bc68182490dae01f936d5f0b148094381ee2d64ba416f7b199.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell	f2670b7b4eb2d6bc68182490dae01f936d5f0b148094381ee2d64ba416f7b199.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID	f2670b7b4eb2d6bc68182490dae01f936d5f0b148094381ee2d64ba416f7b199.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}	f2670b7b4eb2d6bc68182490dae01f936d5f0b148094381ee2d64ba416f7b199.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\qiyxz\\command	f2670b7b4eb2d6bc68182490dae01f936d5f0b148094381ee2d64ba416f7b199.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	f2670b7b4eb2d6bc68182490dae01f936d5f0b148094381ee2d64ba416f7b199.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\qiyxz	f2670b7b4eb2d6bc68182490dae01f936d5f0b148094381ee2d64ba416f7b199.exe

C:\Users\Admin\AppData\Local\Temp\f2670b7b4eb2d6bc68182490dae01f936d5f0b148094381ee2d64ba416f7b199.exe
"C:\Users\Admin\AppData\Local\Temp\f2670b7b4eb2d6bc68182490dae01f936d5f0b148094381ee2d64ba416f7b199.exe"
1⤵
- Modifies registry class
PID:1656