4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50

Analysis

max time kernel
200s
max time network
213s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25/11/2022, 22:07

Target

4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50.exe
Size

92KB
MD5

8dffcbec6ed45285cb8d1af3efd5ff7d
SHA1

66c931b3c71fa9bd355077ff3cf2371d9941b803
SHA256

4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50
SHA512

0611eb7edc71de82f6c6cfac7bea8149aef622bc50389624054c1332ac1a34d6020e3308a2f45d0d26999f17c0dc6faf0f3e3d5762c9a076c2fdbd20dddb8a6f
SSDEEP

1536:bdmSEZ/2VeMxuu6EUbXNachU31VEFjEErxTWDTMqhGKYIZTET8u5j65UlFWh8IUK:QzZixuuMfU3bEFjBkMqhGKZTbuwgWW

Score

1^/10

Modifies registry class 4 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{09A6F38E-F104-2583-B5EC-EDBCDC53322D}\ = "cjcrrhstnlnvzkjc"	4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{09A6F38E-F104-2583-B5EC-EDBCDC53322D}\LocalServer32	4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{09A6F38E-F104-2583-B5EC-EDBCDC53322D}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50.exe"	4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{09A6F38E-F104-2583-B5EC-EDBCDC53322D}	4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50.exe

C:\Users\Admin\AppData\Local\Temp\4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50.exe
"C:\Users\Admin\AppData\Local\Temp\4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50.exe"
1⤵
- Modifies registry class
PID:3572

memory/3572-132-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/3572-133-0x00000000001E0000-0x00000000001FE000-memory.dmp

Filesize
120KB

Download
memory/3572-134-0x00000000001E0000-0x00000000001FE000-memory.dmp

Filesize
120KB

Download