Overview

overview

1

Static

static

1

unregmp2.exe

windows7-x64

unregmp2.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    87s
  • max time network
    92s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/04/2023, 22:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    unregmp2.exe

  • Size

    252KB

  • MD5

    3954b2e1238d0093679c79b2d2dbb629

  • SHA1

    a3683b77615230230d4f6af406df9c3bfedea5ce

  • SHA256

    35d6b2084e1976545007c081ba6cf4c79cbbc40acac0df2ddcc3319b1d1a397e

  • SHA512

    71804bc8929080effd60eebb7e10ce1a195abd9164082a51885894086fc4594ce7d5a83f9c11bc31fd278c0808a178f8fa62bf8c266888a19594099b75780417

  • SSDEEP

    3072:x2JSdoe80BMmaGDRv6xassAYX2iav+IjhHK9hbvAwk4OfumN24g:xtdB80BMmaGDRvYassv2iavPWeB

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\unregmp2.exe
    "C:\Users\Admin\AppData\Local\Temp\unregmp2.exe"
    1⤵
      PID:4112
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:2052
      • C:\Windows\System32\unregmp2.exe
        "C:\Windows\System32\unregmp2.exe"
        1⤵
          PID:4368
        • C:\Windows\System32\unregmp2.exe
          "C:\Windows\System32\unregmp2.exe"
          1⤵
            PID:1508
          • C:\Windows\System32\unregmp2.exe
            "C:\Windows\System32\unregmp2.exe"
            1⤵
              PID:1660
            • C:\Windows\System32\unregmp2.exe
              "C:\Windows\System32\unregmp2.exe"
              1⤵
                PID:4888

              Network

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    • C:\Users\Admin\AppData\Local\Temp\wmsetup.log
                      Filesize

                      1000B

                      MD5

                      a692bd1774fc62592ba6ac1296383859

                      SHA1

                      f3ed56b5c8ee904bc0a5c1c4548929c6901d6cc0

                      SHA256

                      d3ad55dfa725a927907ad8bbe95b9ec3f6fe7b5f29243c351941e128af9705d8

                      SHA512

                      734e205935c47e038850d6c05da5ef66c9f8bc345e99ba003afbb7b630b3fce1f5980a31ab20795eb1251dae5c4ed022d7af9d7f03555161126b14e06bc4388f

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\wmsetup.log
                      Filesize

                      1KB

                      MD5

                      301eb47aa278bc821e97ec96a24f347b

                      SHA1

                      dda6030e69d49821c3670fd113d74504f8f9ecc4

                      SHA256

                      b588dae2be2b47060c09881d2b1bb74163945217579232e535b9962327950c4f

                      SHA512

                      ef3e3aaeefb5fcfa171acb39ba9263e7b7eeb85bf2245302ba381c8d50bc4ddb98ce9e783346e53f160ce45dde6f5d32a63ce8f9f36789bc652dbcbac0d257a9

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\wmsetup.log
                      Filesize

                      1KB

                      MD5

                      70d6b06f62317ca75132b7b8a943d6c3

                      SHA1

                      804d4ef68142a4ebee694c820065fa70cf1bb89d

                      SHA256

                      8bb2d5e445547a2d9ddff5b00d75be58c46bb1115db32b73d972e4add44fa94f

                      SHA512

                      424314e923ee6328df18c7b022f34d77df732441977ab1157aebbb67644f2c5abccf22738c5ac6bc6d7100231f88bb91dff7f416946e303a7a022891db2cfe9b

                      Download Submit