6708e2a4a7f675f9e319fe3655e681fabbc630ecd5d67c40d4fdc317cff8e6ed

Analysis

max time kernel
142s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 23:14

Target

6708e2a4a7f675f9e319fe3655e681fabbc630ecd5d67c40d4fdc317cff8e6ed.exe
Size

140KB
MD5

4263610a25c4310cce9d1c23302e0aa5
SHA1

84ff968e4b3394846580d8ef0a7d8e6127ba3aad
SHA256

6708e2a4a7f675f9e319fe3655e681fabbc630ecd5d67c40d4fdc317cff8e6ed
SHA512

6029418a9a2c02fba3f8a25428a8c25241dcca87546d4f3a5818b51ecdc961789d631d65402b2266335c12d417e75c276c6290717ed5151710168797d265909e
SSDEEP

3072:XHPnow+fX74J7DSmIybfPCb2nEobGUbCWLvqCFXO:vovwGmtbfP+2kGCkvq0O

Score

1^/10

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell	6708e2a4a7f675f9e319fe3655e681fabbc630ecd5d67c40d4fdc317cff8e6ed.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID	6708e2a4a7f675f9e319fe3655e681fabbc630ecd5d67c40d4fdc317cff8e6ed.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}	6708e2a4a7f675f9e319fe3655e681fabbc630ecd5d67c40d4fdc317cff8e6ed.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\mjvpz\\command	6708e2a4a7f675f9e319fe3655e681fabbc630ecd5d67c40d4fdc317cff8e6ed.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	6708e2a4a7f675f9e319fe3655e681fabbc630ecd5d67c40d4fdc317cff8e6ed.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\mjvpz	6708e2a4a7f675f9e319fe3655e681fabbc630ecd5d67c40d4fdc317cff8e6ed.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\mjvpz	6708e2a4a7f675f9e319fe3655e681fabbc630ecd5d67c40d4fdc317cff8e6ed.exe

C:\Users\Admin\AppData\Local\Temp\6708e2a4a7f675f9e319fe3655e681fabbc630ecd5d67c40d4fdc317cff8e6ed.exe
"C:\Users\Admin\AppData\Local\Temp\6708e2a4a7f675f9e319fe3655e681fabbc630ecd5d67c40d4fdc317cff8e6ed.exe"
1⤵
- Modifies registry class
PID:2120