c18bec69bcbac2ad487986b22aabd1c4571d8b88707d6f0478a0b4c692a61fa3

Analysis

max time kernel
141s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 06:29

Target

59a5dd9a18546d4c5eeee160d57672a8.exe
Size

838KB
MD5

59a5dd9a18546d4c5eeee160d57672a8
SHA1

2ab8bbfd4bfd1ad949f954b07bc7b2b64c8766a2
SHA256

c18bec69bcbac2ad487986b22aabd1c4571d8b88707d6f0478a0b4c692a61fa3
SHA512

c1cb6d4516b3f198363a215ce920aa57a0ff55ef3861e55e884ddf7a9da55effda659ff0b1afcdd16b6c0fca5aa0d9d33e7dbfa4af8e8509de5acf4699d71a06
SSDEEP

24576:9pRUCVMfNulZrW4eQnt/JEc9B2U5Cg5bj:9phG6tW4ekt/JX9HCg1j

Score

1^/10

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Windows	59a5dd9a18546d4c5eeee160d57672a8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Windows\CurrentVersion	59a5dd9a18546d4c5eeee160d57672a8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Run	59a5dd9a18546d4c5eeee160d57672a8.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\amsn = "C:\\Windows\\system32C:\\WINDOWS\\Config\\amsn.exe"	59a5dd9a18546d4c5eeee160d57672a8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Software\Microsoft\Windows\CurrentVersion\Run	59a5dd9a18546d4c5eeee160d57672a8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Software	59a5dd9a18546d4c5eeee160d57672a8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft	59a5dd9a18546d4c5eeee160d57672a8.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3884	59a5dd9a18546d4c5eeee160d57672a8.exe

memory/3884-0-0x0000000000400000-0x00000000007769E8-memory.dmp

Filesize
3.5MB

Download
memory/3884-1-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/3884-2-0x0000000000400000-0x00000000007769E8-memory.dmp

Filesize
3.5MB

Download
memory/3884-3-0x0000000000400000-0x00000000007769E8-memory.dmp

Filesize
3.5MB

Download
memory/3884-4-0x0000000000400000-0x00000000007769E8-memory.dmp

Filesize
3.5MB

Download
memory/3884-5-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/3884-6-0x0000000000400000-0x00000000007769E8-memory.dmp

Filesize
3.5MB

Download
memory/3884-7-0x0000000000400000-0x00000000007769E8-memory.dmp

Filesize
3.5MB

Download