Analysis
-
max time kernel
207s -
max time network
212s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 11:18
Static task
static1
Behavioral task
behavioral1
Sample
7c217bc27a6671e8a9139926341ef9cb02b2418ddf9dce4343238657badd6a0c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7c217bc27a6671e8a9139926341ef9cb02b2418ddf9dce4343238657badd6a0c.exe
Resource
win10v2004-20221111-en
General
-
Target
7c217bc27a6671e8a9139926341ef9cb02b2418ddf9dce4343238657badd6a0c.exe
-
Size
71KB
-
MD5
07e90523615e9c51ea4de88775c7dd54
-
SHA1
bbd60a21d2c776b0d2d732e40b68f03713cbde29
-
SHA256
7c217bc27a6671e8a9139926341ef9cb02b2418ddf9dce4343238657badd6a0c
-
SHA512
0d8621ec4177a55bc2be480b55adb7ec7deafc55316a148d0c0870698f07993d405710c159fe63cfb2cc1c6ce6dd7a6f325280d0d78607b12b60dc32fac01a9c
-
SSDEEP
1536:ReJbvKKvNiQ9A3dhjFVsTxA/nk8XD++YySt8bx7QxhQP0olJrnPxM3TbeYtGv:ReJbCKvNiQ9A3dhj/gx4qSStM7Qx6plF
Malware Config
Signatures
-
Modifies registry class 4 IoCs
Processes:
7c217bc27a6671e8a9139926341ef9cb02b2418ddf9dce4343238657badd6a0c.exedescription ioc process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2B6C24E4-576A-EC25-9ABA-98C3EBCA40AE} 7c217bc27a6671e8a9139926341ef9cb02b2418ddf9dce4343238657badd6a0c.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2B6C24E4-576A-EC25-9ABA-98C3EBCA40AE}\ = "rncnttxzhwcvkhwv" 7c217bc27a6671e8a9139926341ef9cb02b2418ddf9dce4343238657badd6a0c.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2B6C24E4-576A-EC25-9ABA-98C3EBCA40AE}\LocalServer32 7c217bc27a6671e8a9139926341ef9cb02b2418ddf9dce4343238657badd6a0c.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2B6C24E4-576A-EC25-9ABA-98C3EBCA40AE}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\7c217bc27a6671e8a9139926341ef9cb02b2418ddf9dce4343238657badd6a0c.exe" 7c217bc27a6671e8a9139926341ef9cb02b2418ddf9dce4343238657badd6a0c.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2216-132-0x0000000000400000-0x000000000042C489-memory.dmpFilesize
177KB
-
memory/2216-133-0x00000000001E0000-0x00000000001FE000-memory.dmpFilesize
120KB
-
memory/2216-134-0x0000000000400000-0x000000000042C489-memory.dmpFilesize
177KB
-
memory/2216-135-0x00000000001E0000-0x00000000001FE000-memory.dmpFilesize
120KB