Analysis
-
max time kernel
166s -
max time network
188s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03-12-2022 09:38
Static task
static1
Behavioral task
behavioral1
Sample
b7544726f83becdae30d5f485876bfde5b406126f4ad5bba55929b6d4745a674.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b7544726f83becdae30d5f485876bfde5b406126f4ad5bba55929b6d4745a674.exe
Resource
win10v2004-20220812-en
General
-
Target
b7544726f83becdae30d5f485876bfde5b406126f4ad5bba55929b6d4745a674.exe
-
Size
63KB
-
MD5
4f04fa005daf7a312132b9022e25e111
-
SHA1
5c9e31a6ade6430aab56e78c2ba25b6e17677730
-
SHA256
b7544726f83becdae30d5f485876bfde5b406126f4ad5bba55929b6d4745a674
-
SHA512
0ee21470a56e1e4c96aac800dc9c61aae8e7d0fbd7ea4fe31808f7f32f0469b8e62ad419ae5ccfb1436f2f22c4ec5c2948346303acd22a39aeaae41354566f7a
-
SSDEEP
1536:h6R3TZmK00Yuxf/ubTXA1n1Y9vexuXr6Nh5MPw0f9r114a:4RsK/nxf/uvXAavexuah8werZ
Malware Config
Signatures
-
Modifies registry class 4 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{958B3E73-4329-FB25-01EB-B7B57D7702C4}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\b7544726f83becdae30d5f485876bfde5b406126f4ad5bba55929b6d4745a674.exe" b7544726f83becdae30d5f485876bfde5b406126f4ad5bba55929b6d4745a674.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{958B3E73-4329-FB25-01EB-B7B57D7702C4} b7544726f83becdae30d5f485876bfde5b406126f4ad5bba55929b6d4745a674.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{958B3E73-4329-FB25-01EB-B7B57D7702C4}\ = "kbkeeqhvbbnsqtsb" b7544726f83becdae30d5f485876bfde5b406126f4ad5bba55929b6d4745a674.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{958B3E73-4329-FB25-01EB-B7B57D7702C4}\LocalServer32 b7544726f83becdae30d5f485876bfde5b406126f4ad5bba55929b6d4745a674.exe