baa79864a5f2cc75db1b06fe447d876d59cb830929cb96007b4fb7e4ef8518bb

Analysis

max time kernel
209s
max time network
216s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25/11/2022, 21:58

Target

baa79864a5f2cc75db1b06fe447d876d59cb830929cb96007b4fb7e4ef8518bb.exe
Size

119KB
MD5

4b673a0362922ab23674e0a5ad25f9e0
SHA1

32bcf6e9cb07f36c466bd77fb73327381cf9fe9b
SHA256

baa79864a5f2cc75db1b06fe447d876d59cb830929cb96007b4fb7e4ef8518bb
SHA512

eaca3a4311a72c5682cc6ef1e2f4c52bc53b91ea3ceb9718ea8db36998da231088fc176530ad9a0c6859ae8bff0b7629ed12cd15a05495d16b4dc8fdf5bccffa
SSDEEP

1536:8zxEmitefmyvk490evYzuG7A9NjXDwGufBEiaSKf1cpjVrs2ryrd1vUQuqSSqK5S:Oi5e1M4FfGuDwWSK9cHs2qxnC

Score

1^/10

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{566CE762-5BAC-7AC5-576B-26894955686A}	baa79864a5f2cc75db1b06fe447d876d59cb830929cb96007b4fb7e4ef8518bb.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{566CE762-5BAC-7AC5-576B-26894955686A}\ = "bqjwbslxtkxcslsh"	baa79864a5f2cc75db1b06fe447d876d59cb830929cb96007b4fb7e4ef8518bb.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{566CE762-5BAC-7AC5-576B-26894955686A}\LocalServer32	baa79864a5f2cc75db1b06fe447d876d59cb830929cb96007b4fb7e4ef8518bb.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{566CE762-5BAC-7AC5-576B-26894955686A}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\baa79864a5f2cc75db1b06fe447d876d59cb830929cb96007b4fb7e4ef8518bb.exe"	baa79864a5f2cc75db1b06fe447d876d59cb830929cb96007b4fb7e4ef8518bb.exe

C:\Users\Admin\AppData\Local\Temp\baa79864a5f2cc75db1b06fe447d876d59cb830929cb96007b4fb7e4ef8518bb.exe
"C:\Users\Admin\AppData\Local\Temp\baa79864a5f2cc75db1b06fe447d876d59cb830929cb96007b4fb7e4ef8518bb.exe"
1⤵
- Modifies registry class
PID:1244

memory/1244-132-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download
memory/1244-133-0x00000000001E0000-0x00000000001FE000-memory.dmp

Filesize
120KB

Download
memory/1244-134-0x00000000001E0000-0x00000000001FE000-memory.dmp

Filesize
120KB

Download
memory/1244-135-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download