d37247a3de7d5d9e760e7331499a156ba661ebd3edb60eca77f5ea0011e34a63

Analysis

max time kernel
115s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23/11/2022, 21:59

Target

d37247a3de7d5d9e760e7331499a156ba661ebd3edb60eca77f5ea0011e34a63.exe
Size

128KB
MD5

51324517db9c558f335c5556a78d2820
SHA1

507cf4cadbda414f7884c5cd66414e52e3ac2e75
SHA256

d37247a3de7d5d9e760e7331499a156ba661ebd3edb60eca77f5ea0011e34a63
SHA512

5a476f35d033f0f18e346e76134ad619ee5210e6b3d88ad9c55f931be32ba63defb930798309a90d76a2dbcf5ca2d4d2d75a7d6708585727680efe2447f88ec1
SSDEEP

3072:ueEz5DWJ4yHOROpx7WCzy4+tt+7AgQZ1eZamuMh:uVXROp+j+cgQmaxA

Score

1^/10

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell	d37247a3de7d5d9e760e7331499a156ba661ebd3edb60eca77f5ea0011e34a63.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID	d37247a3de7d5d9e760e7331499a156ba661ebd3edb60eca77f5ea0011e34a63.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}	d37247a3de7d5d9e760e7331499a156ba661ebd3edb60eca77f5ea0011e34a63.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\ssqki\\command	d37247a3de7d5d9e760e7331499a156ba661ebd3edb60eca77f5ea0011e34a63.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	d37247a3de7d5d9e760e7331499a156ba661ebd3edb60eca77f5ea0011e34a63.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\ssqki	d37247a3de7d5d9e760e7331499a156ba661ebd3edb60eca77f5ea0011e34a63.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\ssqki	d37247a3de7d5d9e760e7331499a156ba661ebd3edb60eca77f5ea0011e34a63.exe

C:\Users\Admin\AppData\Local\Temp\d37247a3de7d5d9e760e7331499a156ba661ebd3edb60eca77f5ea0011e34a63.exe
"C:\Users\Admin\AppData\Local\Temp\d37247a3de7d5d9e760e7331499a156ba661ebd3edb60eca77f5ea0011e34a63.exe"
1⤵
- Modifies registry class
PID:3016