8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af

Analysis

max time kernel
88s
max time network
52s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
24-11-2022 03:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe
Size

1.1MB
MD5

b76b67215975e484858553df50edea47
SHA1

6cab7838dd47ea1127e9f21180c1e787c392d38a
SHA256

8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af
SHA512

d4aa04a109a40786a038504f8eb30a828efc78a15952e8820a5d8b35f78941d2502c9bf6289fc60c0225c300565f0c40c489c13c1a2c4ff55917ebc4f70b8669
SSDEEP

24576:VYv+U1wJuf+fRF6S+sBtkYdXH44L692D0svfMPN8Tk:av+U1wJuWfRF6HxezoI0ssyTk

Score

1^/10

Malware Config

Signatures

Modifies registry class 9 IoCs

Processes:

8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\NEWPOS.Download.Package.File	8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\NEWPOS.Download.Package.File\shell	8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\NEWPOS.Download.Package.File\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe\" \"%1\""	8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\NEWPOS.Download.Package.File\DefaultIcon	8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.pkg\ = "NEWPOS.Download.Package.File"	8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\NEWPOS.Download.Package.File\shell\open\command	8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\NEWPOS.Download.Package.File\shell\open	8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\NEWPOS.Download.Package.File\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe,1"	8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.pkg	8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe

C:\Users\Admin\AppData\Local\Temp\8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe
"C:\Users\Admin\AppData\Local\Temp\8c1daeede5f07cee236cd3babb62bfd5b685ad63969ab9a15f9935f8a194e6af.exe"
1⤵
- Modifies registry class
PID:1416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1416-54-0x0000000075E11000-0x0000000075E13000-memory.dmp

Filesize
8KB

Download