dbe1b5e80bcac8b4d181e666e08715d46ce448bd6851ad0af7cc1c123f09f338 | Triage

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29-12-2023 20:30

Sharing

Report Analysis Logs

General

Target

032cd2947035a5a2e15b1e78d141b181.exe
Size

136KB
MD5

032cd2947035a5a2e15b1e78d141b181
SHA1

ab30d265b31cf3bb6c188c386134c790ed3c9266
SHA256

dbe1b5e80bcac8b4d181e666e08715d46ce448bd6851ad0af7cc1c123f09f338
SHA512

3bc62a32288c3473477b3f35c67f1ee07f072157f72d97e2c7d7236abb791ee63f1b09cba3c6ae7f86e0eebf4be5b8d619b026cbd2dab7ab309cd3c6bad283e8
SSDEEP

3072:KrqD7eodAJm+AtmJWxyQmL3FeJOsE6bGphSZ6umR:xuod7byQGeEcMhcrmR

Score

1^/10

Malware Config

Signatures

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell	032cd2947035a5a2e15b1e78d141b181.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID	032cd2947035a5a2e15b1e78d141b181.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}	032cd2947035a5a2e15b1e78d141b181.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\mvoxc\\command	032cd2947035a5a2e15b1e78d141b181.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	032cd2947035a5a2e15b1e78d141b181.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\mvoxc	032cd2947035a5a2e15b1e78d141b181.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\mvoxc	032cd2947035a5a2e15b1e78d141b181.exe

C:\Users\Admin\AppData\Local\Temp\032cd2947035a5a2e15b1e78d141b181.exe
"C:\Users\Admin\AppData\Local\Temp\032cd2947035a5a2e15b1e78d141b181.exe"
1⤵
- Modifies registry class
PID:3828

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
1⤵
PID:3056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads