d7dd0d6e341d92f91bf7ffa7849a0cb308d7c5f70a3b47970ec6060e8740c625

Analysis

max time kernel
60s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
08/06/2023, 16:29

Target

SecuriteInfo.com.BScope.Trojan.Zpevdo.12231.13198.exe
Size

1.1MB
MD5

2149070a39b56ba090ef5d7d70643e48
SHA1

eed5005eaa54dcd1793e43163c0b6e6da0a647c1
SHA256

d7dd0d6e341d92f91bf7ffa7849a0cb308d7c5f70a3b47970ec6060e8740c625
SHA512

38d6e616c5e2e919edff2efa774df40574cdaea32ef1022310b43188d98ac554cb4ea1b63432af668f5c2a12ec039f10d92488542437cebbe94c7b159f2f23a9
SSDEEP

24576:A571w4XBPIv6VYrrGLrAXDM9YAlWNul2gmH8h3RyG7uCC2:AhRIA06LMXDgWNul3ByG7VC2

Score

1^/10

Modifies registry class 3 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile"	SecuriteInfo.com.BScope.Trojan.Zpevdo.12231.13198.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.key	SecuriteInfo.com.BScope.Trojan.Zpevdo.12231.13198.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\	SecuriteInfo.com.BScope.Trojan.Zpevdo.12231.13198.exe

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.BScope.Trojan.Zpevdo.12231.13198.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.BScope.Trojan.Zpevdo.12231.13198.exe"
1⤵
- Modifies registry class
PID:4144

C:\Users\Admin\AppData\Local\Temp\Missing.log

Filesize
229B

MD5
9342604b738158fffaca9722cf2855ae

SHA1
f2588fdaaa8253ba587549d8d15485b8f2031ba8

SHA256
f31c94e1e6ef15ad8ac51d2d040455c7dc6b9bd713610598aaf17270b6cff228

SHA512
70f3c9006acd8e0470b081a25c4faf1fb86bf6fa4ba9d20c0a97eb0f6b1d626b724398c937f2a2ae7e323221620c47ab1f59ea621a5ab6a6fa62e8af769143f7

Download Submit
memory/4144-133-0x0000000000400000-0x0000000000F25000-memory.dmp

Filesize
11.1MB

Download
memory/4144-134-0x0000000002E80000-0x0000000002E81000-memory.dmp

Filesize
4KB

Download
memory/4144-135-0x0000000002E80000-0x0000000002E81000-memory.dmp

Filesize
4KB

Download
memory/4144-136-0x0000000002E80000-0x0000000002E81000-memory.dmp

Filesize
4KB

Download
memory/4144-137-0x0000000002E90000-0x0000000002E91000-memory.dmp

Filesize
4KB

Download
memory/4144-147-0x00000000015C0000-0x00000000015C5000-memory.dmp

Filesize
20KB

Download
memory/4144-138-0x0000000002E80000-0x0000000002E87000-memory.dmp

Filesize
28KB

Download
memory/4144-148-0x0000000000F30000-0x0000000000F31000-memory.dmp

Filesize
4KB

Download
memory/4144-151-0x0000000000400000-0x0000000000F25000-memory.dmp

Filesize
11.1MB

Download