774e3967b822539cb0a145c0ae24a0869fc412c87a336b0e6f038255eed9dafc

Analysis

max time kernel
75s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29-11-2022 20:03

Target

lghub/Configuration/System32/AUDIOKSE.dll
Size

411KB
MD5

e98568fbc069f9fa9c657d36d111a4a1
SHA1

f7244796bcd651a7b70cd075043353f0aec0cfdd
SHA256

c0ca03a8f441b85f622060a7da85df17104728be987332c7dbbeb7388bc78258
SHA512

b7448a3353ec3f47837b33505d9a9b8a264510b6506eed1d9d9d96c49e4c2a6582ce60628626f263c5a8ddbcdd5a249efb0824f24a2c3f256da6ac1aa297a2b4
SSDEEP

12288:ctMpeG9fTxy/C+55MNFdVwW80SPfC8i1gnKY:tIG9cC+55WdVwh0SPfC8i1gKY

Score

1^/10

Modifies registry class 4 IoCs

Processes:

regsvr32.exe

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{393830E7-666C-4C5E-9DBC-077D8602B016}\ = "AudioKsE"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\AudioKsE.DLL	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\AudioKsE.DLL\AppID = "{393830E7-666C-4C5E-9DBC-077D8602B016}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{393830E7-666C-4C5E-9DBC-077D8602B016}	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\lghub\Configuration\System32\AUDIOKSE.dll
1⤵
- Modifies registry class
PID:992