37acc08f30ba07dd9da580f9f49b3a3332111fd4bdeb6370343920f7dc68541d

Analysis

max time kernel
124s
max time network
187s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
13/10/2023, 04:47

Target

37acc08f30ba07dd9da580f9f49b3a3332111fd4bdeb6370343920f7dc68541d.exe
Size

293KB
MD5

664779b54658de21579dfb32ae219f13
SHA1

f5357c584694707f2a499c3130b22ac3fd52f2a9
SHA256

37acc08f30ba07dd9da580f9f49b3a3332111fd4bdeb6370343920f7dc68541d
SHA512

e2c8585be5e45a551a0f977caa5dc2496a9d06303de1cecefc17a1da29692971a0911b7a7488733ce26d2aee2e20fae83f35a54f38d35f6a2817b0daae6a0ebe
SSDEEP

3072:FXakhmZbMvZca+hWHdwT3DJ6Hp2nCY+vJ6i:kKhIDnCnh

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3027552071-446050021-1254071215-1000_Classes\Local Settings	explorer.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3408 wrote to memory of 3712	3408	37acc08f30ba07dd9da580f9f49b3a3332111fd4bdeb6370343920f7dc68541d.exe	81
PID 3408 wrote to memory of 3712	3408	37acc08f30ba07dd9da580f9f49b3a3332111fd4bdeb6370343920f7dc68541d.exe	81

C:\Users\Admin\AppData\Local\Temp\37acc08f30ba07dd9da580f9f49b3a3332111fd4bdeb6370343920f7dc68541d.exe
"C:\Users\Admin\AppData\Local\Temp\37acc08f30ba07dd9da580f9f49b3a3332111fd4bdeb6370343920f7dc68541d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3408
- C:\Windows\explorer.exe
  explorer.exe
  2⤵
  - Modifies registry class
  PID:3712