ca8452a18aff831771f62f8d5a0c22d141955ff7947e5d337f91445c568a15cf

Analysis

max time kernel
141s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 07:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2d7796c86e4eeaaf85f77293360aa1d8.exe
Size

11KB
MD5

2d7796c86e4eeaaf85f77293360aa1d8
SHA1

3e4da07b89bfac890b7b4b0baef818a6323f408b
SHA256

ca8452a18aff831771f62f8d5a0c22d141955ff7947e5d337f91445c568a15cf
SHA512

4c22b7e4db387b44c94dae32dc547db736f88253a8b00114ad2b3c552edf82c09a23c92dcf17324a25cfbb05f2fc9e25fd3ea1a4b1540cd92a078386315bc15b
SSDEEP

192:iRMiCliqgY3cUgKZIsuqXvLxtbQomDDohSOi+cOJXCEL7Rlkj3Gwfie5ZVooV+3N:cMvil+cUhZIs1xtcocUrJvHRC2Wie5PO

Score

1^/10

Malware Config

Signatures

Modifies registry class 10 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B6EACBD3-5E4D-6D27-372A-2035908D4771}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2d7796c86e4eeaaf85f77293360aa1d8.exe"	2d7796c86e4eeaaf85f77293360aa1d8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B6EACBD3-5E4D-6D27-372A-2035908D4771}\LocalServer32	2d7796c86e4eeaaf85f77293360aa1d8.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B6EACBD3-5E4D-6D27-372A-2035908D4771}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2d7796c86e4eeaaf85f77293360aa1d8.exe"	2d7796c86e4eeaaf85f77293360aa1d8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B6EACBD3-5E4D-6D27-372A-2035908D4771}	2d7796c86e4eeaaf85f77293360aa1d8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B6EACBD3-5E4D-6D27-372A-2035908D4771}\LocalServer32	2d7796c86e4eeaaf85f77293360aa1d8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B6EACBD3-5E4D-6D27-372A-2035908D4771}\Data	2d7796c86e4eeaaf85f77293360aa1d8.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B6EACBD3-5E4D-6D27-372A-2035908D4771}\Data\ = 00000000d98b0e7d00000000000000000000000000000000	2d7796c86e4eeaaf85f77293360aa1d8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B6EACBD3-5E4D-6D27-372A-2035908D4771}	2d7796c86e4eeaaf85f77293360aa1d8.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B6EACBD3-5E4D-6D27-372A-2035908D4771}\Data	2d7796c86e4eeaaf85f77293360aa1d8.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B6EACBD3-5E4D-6D27-372A-2035908D4771}\Data\ = 00000000d98b0e7d00000000000000000000000000000000	2d7796c86e4eeaaf85f77293360aa1d8.exe

C:\Users\Admin\AppData\Local\Temp\2d7796c86e4eeaaf85f77293360aa1d8.exe
"C:\Users\Admin\AppData\Local\Temp\2d7796c86e4eeaaf85f77293360aa1d8.exe"
1⤵
- Modifies registry class
PID:816

C:\Users\Admin\AppData\Local\Temp\2d7796c86e4eeaaf85f77293360aa1d8.exe
"C:\Users\Admin\AppData\Local\Temp\2d7796c86e4eeaaf85f77293360aa1d8.exe" /s
1⤵
- Modifies registry class
PID:280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/280-1-0x0000000000400000-0x000000000040A619-memory.dmp

Filesize
41KB

Download
memory/280-3-0x0000000000400000-0x000000000040A619-memory.dmp

Filesize
41KB

Download
memory/816-0-0x0000000000400000-0x000000000040A619-memory.dmp

Filesize
41KB

Download
memory/816-2-0x0000000000400000-0x000000000040A619-memory.dmp

Filesize
41KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads