Analysis
-
max time kernel
141s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 13:29
Behavioral task
behavioral1
Sample
1a0a88ce91990dbe7da1c4166269e0de.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1a0a88ce91990dbe7da1c4166269e0de.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
1a0a88ce91990dbe7da1c4166269e0de.exe
-
Size
503KB
-
MD5
1a0a88ce91990dbe7da1c4166269e0de
-
SHA1
f1dbe10842a887bfe62e42a0a09a20dcca52ed00
-
SHA256
818da69c08345ed71b931697fb9d7752208c15ba8577ed7b75b5790820c4c7e9
-
SHA512
2fada96846895c77bc4afd04b1a824de6295a887d81a4fe9b7a074be4260bce2c1349f514202d583899c91f15f62d50ada5e56c25501a0b079c6fce9c7b38db3
-
SSDEEP
12288:/RUTZK5McvmXHKfQVv250mBTex8KNxLEjFmBUmCIwEWINZv:84ecvRQVm0mox8KNxzBHCbSZ
Score
1/10
Malware Config
Signatures
-
Modifies registry class 7 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3791175113-1062217823-1177695025-1000_Classes\WOW6432Node\CLSID\{54CF7473-0CD0-490A-A7FE-ECDB05D93AFF}\Info\D2 = "6A0E21716B056713" 1a0a88ce91990dbe7da1c4166269e0de.exe Set value (str) \REGISTRY\USER\S-1-5-21-3791175113-1062217823-1177695025-1000_Classes\WOW6432Node\CLSID\{54CF7473-0CD0-490A-A7FE-ECDB05D93AFF}\Info\D3 = "6A0E21716B056713" 1a0a88ce91990dbe7da1c4166269e0de.exe Key created \REGISTRY\USER\S-1-5-21-3791175113-1062217823-1177695025-1000_Classes\WOW6432Node\CLSID\{54CF7473-0CD0-490A-A7FE-ECDB05D93AFF}\Info 1a0a88ce91990dbe7da1c4166269e0de.exe Key created \REGISTRY\USER\S-1-5-21-3791175113-1062217823-1177695025-1000_Classes\WOW6432Node 1a0a88ce91990dbe7da1c4166269e0de.exe Key created \REGISTRY\USER\S-1-5-21-3791175113-1062217823-1177695025-1000_Classes\WOW6432Node\CLSID 1a0a88ce91990dbe7da1c4166269e0de.exe Key created \REGISTRY\USER\S-1-5-21-3791175113-1062217823-1177695025-1000_Classes\WOW6432Node\CLSID\{54CF7473-0CD0-490A-A7FE-ECDB05D93AFF} 1a0a88ce91990dbe7da1c4166269e0de.exe Set value (int) \REGISTRY\USER\S-1-5-21-3791175113-1062217823-1177695025-1000_Classes\WOW6432Node\CLSID\{54CF7473-0CD0-490A-A7FE-ECDB05D93AFF}\Info\D1 = "1" 1a0a88ce91990dbe7da1c4166269e0de.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4496 1a0a88ce91990dbe7da1c4166269e0de.exe