dbac03b36b381b0ceaafae204b5282e45f0d134c9aa569d7fa5ed8868e119ceb

Analysis

max time kernel
152s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 21:33

Target

dbac03b36b381b0ceaafae204b5282e45f0d134c9aa569d7fa5ed8868e119ceb.exe
Size

67KB
MD5

2aee09e29eb0fc8b1e2b545dc993ca2e
SHA1

00a15eaa694dc82094bcdba5cd84f623f0f03c7e
SHA256

dbac03b36b381b0ceaafae204b5282e45f0d134c9aa569d7fa5ed8868e119ceb
SHA512

5afe3b3dd08c57f67cb226facf29683c89bd205ba353689c9d183d7123829384bbb2ce43b1e7ee979745acb360a5595f4874ea4714a3070a195c15f29a5a31f7
SSDEEP

1536:xwAhKCIDaSwktZA1T50L90Zx88tOQLhN4OZQHNEvyu3wf0xt:xRsaXUy902ZxKQhKNEvyu3K0xt

Score

1^/10

Modifies registry class 4 IoCs

Processes:

dbac03b36b381b0ceaafae204b5282e45f0d134c9aa569d7fa5ed8868e119ceb.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{EF67B904-A7EA-385C-2326-D3BD7130FAAA}	dbac03b36b381b0ceaafae204b5282e45f0d134c9aa569d7fa5ed8868e119ceb.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{EF67B904-A7EA-385C-2326-D3BD7130FAAA}\ = "jwrzlhzbcrhbvlnj"	dbac03b36b381b0ceaafae204b5282e45f0d134c9aa569d7fa5ed8868e119ceb.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{EF67B904-A7EA-385C-2326-D3BD7130FAAA}\LocalServer32	dbac03b36b381b0ceaafae204b5282e45f0d134c9aa569d7fa5ed8868e119ceb.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{EF67B904-A7EA-385C-2326-D3BD7130FAAA}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\dbac03b36b381b0ceaafae204b5282e45f0d134c9aa569d7fa5ed8868e119ceb.exe"	dbac03b36b381b0ceaafae204b5282e45f0d134c9aa569d7fa5ed8868e119ceb.exe

C:\Users\Admin\AppData\Local\Temp\dbac03b36b381b0ceaafae204b5282e45f0d134c9aa569d7fa5ed8868e119ceb.exe
"C:\Users\Admin\AppData\Local\Temp\dbac03b36b381b0ceaafae204b5282e45f0d134c9aa569d7fa5ed8868e119ceb.exe"
1⤵
- Modifies registry class
PID:2064

memory/2064-132-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2064-133-0x00000000001E0000-0x00000000001FE000-memory.dmp

Filesize
120KB

Download
memory/2064-134-0x00000000001E0000-0x00000000001FE000-memory.dmp

Filesize
120KB

Download
memory/2064-135-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download