b20e0ad492e27db07de66b3b5338530c7a15881dcb20dfc21326db13d063d36d

Analysis

max time kernel
43s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01-12-2022 19:18

Target

b20e0ad492e27db07de66b3b5338530c7a15881dcb20dfc21326db13d063d36d.exe
Size

128KB
MD5

a606301675ccbf4c07613887257101a8
SHA1

b54d1dba8adde4d88435d9d779f7993b5b4f63fc
SHA256

b20e0ad492e27db07de66b3b5338530c7a15881dcb20dfc21326db13d063d36d
SHA512

b8be00ea6c3fd5839c4c5ba47127964777e13accbf02e2f18937ab2c17d51a252441ce679fbdc46a8dba0186deaa76422c04548123b1ad62b9728dad04a2b99f
SSDEEP

3072:cgIYWBVfsyIJmV+UQRu5zp4xfRGC8ArGEYogT:sFPV++z2QC8AyEXgT

Score

1^/10

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID	b20e0ad492e27db07de66b3b5338530c7a15881dcb20dfc21326db13d063d36d.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}	b20e0ad492e27db07de66b3b5338530c7a15881dcb20dfc21326db13d063d36d.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\xzelh\\command	b20e0ad492e27db07de66b3b5338530c7a15881dcb20dfc21326db13d063d36d.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node	b20e0ad492e27db07de66b3b5338530c7a15881dcb20dfc21326db13d063d36d.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\xzelh	b20e0ad492e27db07de66b3b5338530c7a15881dcb20dfc21326db13d063d36d.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\xzelh	b20e0ad492e27db07de66b3b5338530c7a15881dcb20dfc21326db13d063d36d.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell	b20e0ad492e27db07de66b3b5338530c7a15881dcb20dfc21326db13d063d36d.exe

C:\Users\Admin\AppData\Local\Temp\b20e0ad492e27db07de66b3b5338530c7a15881dcb20dfc21326db13d063d36d.exe
"C:\Users\Admin\AppData\Local\Temp\b20e0ad492e27db07de66b3b5338530c7a15881dcb20dfc21326db13d063d36d.exe"
1⤵
- Modifies registry class
PID:1896