Analysis

  • max time kernel
    82s
  • max time network
    86s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    05-02-2023 01:39

General

  • Target

    Srenshare tool/Tools/RegScanner.exe

  • Size

    59KB

  • MD5

    2e998efadda38ea838d22354d7f335b9

  • SHA1

    bc2cc88ba637eb84a70eb79a710313926f9056c1

  • SHA256

    a4fdda53e3bcd4e369baec3436e06acd6c210b8de950f439cf425db37c66e897

  • SHA512

    935757530f51e8d79da06070140e4fdf950be9411ca401333d3cdb15485d7ebaf61c577c9d467c22b78b18b8d0fa22d66d438ca3ba3630f8d4af448fa2eff75e

  • SSDEEP

    768:82dfLRvCbvubjBpiZrH6ENDk9fWcofmDybxH0mSJIVFh5rbipGeiWwQ:82NRv2aniZrNBVcof8qxH0RID7bipG6v

Score
9/10
upx

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Srenshare tool\Tools\RegScanner.exe
    "C:\Users\Admin\AppData\Local\Temp\Srenshare tool\Tools\RegScanner.exe"
    1⤵
      PID:2900

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2900-115-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-116-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-117-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-118-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-119-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-120-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-122-0x0000000000400000-0x000000000041D000-memory.dmp

      Filesize

      116KB

    • memory/2900-123-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-124-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-121-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-125-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-126-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-127-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-128-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-129-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-131-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-130-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-132-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-133-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-134-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-135-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-136-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-137-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-139-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-140-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-141-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-138-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-142-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-143-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-144-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-145-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-146-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-147-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-148-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-149-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-150-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-151-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-152-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-153-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-155-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-156-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-154-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-157-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-158-0x0000000076FE0000-0x000000007716E000-memory.dmp

      Filesize

      1.6MB

    • memory/2900-159-0x0000000000400000-0x000000000041D000-memory.dmp

      Filesize

      116KB