c6cc7d99edd533b730945407883a194bae14d46b7b8e9aabc0e36f1309e873bc

Analysis

max time kernel
138s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
08/01/2024, 21:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

4c777077a45d995f53e43c9e88a6d755.exe
Size

1.2MB
MD5

4c777077a45d995f53e43c9e88a6d755
SHA1

b9320eb6bb8b48a4a597aae4d3eb3403a9aff986
SHA256

c6cc7d99edd533b730945407883a194bae14d46b7b8e9aabc0e36f1309e873bc
SHA512

d413cdab2022b0075438348d8c46061f4776030a8c5dc3dd696fddb856cf9f4b849ad5304b2115753cb0b7555560fc508a2aebcce701bab4bdadd7bc243d1a65
SSDEEP

24576:EyUL8X6o1gfwS/ztYUNKtDcgl6Urqd1Sg4/4GxIQmXP177XAe/1q:EyUwX6o1g9Yb9cS6bCgiXfmx7X1M

Score

1^/10

Malware Config

Signatures

Modifies registry class 54 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\ProgID\ = "MsTscAx.MsTscAx.5"	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\Version	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\ProgID	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8\0\win32	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0\0\win32\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\Version\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\VersionIndependentProgID\ = "MsTscAx.MsTscAx"	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\InprocServer32	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8\0\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8\0\win32\ = "C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd28.tlb"	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8\0\win64\ = "C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb"	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0\	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0\FLAGS	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0\FLAGS\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\TypeLib\ = "{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}"	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\InprocServer32\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\VersionIndependentProgID\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8\FLAGS\ = "0"	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8\ = "Microsoft ActiveX Data Objects (Multi-dimensional) 2.8 Library"	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8\0	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8\FLAGS	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0\0\win32	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\MiscStatus	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\InprocServer32\ = "%systemroot%\\SysWow64\\mstscax.dll"	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0\0\win32\ = "C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd.dll"	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\VersionIndependentProgID	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0\0\win64\ = "C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll"	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\Programmable\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8\	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0\0	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0\FLAGS\ = "0"	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\ProgID\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\Control\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\Version\ = "1.0"	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\Control	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\MiscStatus\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0\0\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8\FLAGS\	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\Programmable	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8\0\win64	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0\0\win64	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\TypeLib	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\MiscStatus\ = "0"	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0\0\win64\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\TypeLib\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\6.0\ = "Microsoft ActiveX Data Objects (Multi-dimensional) 6.0 Library"	4c777077a45d995f53e43c9e88a6d755.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8\0\win32\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{A5ACD963-6ECE-04D5-03D5-EA700175DAB6}\2.8\0\win64\	4c777077a45d995f53e43c9e88a6d755.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BFF33232-26AA-4F50-CDA2-2A4AABD48C95}\ = "Xejoxbim Ediqowvox"	4c777077a45d995f53e43c9e88a6d755.exe

C:\Users\Admin\AppData\Local\Temp\4c777077a45d995f53e43c9e88a6d755.exe
"C:\Users\Admin\AppData\Local\Temp\4c777077a45d995f53e43c9e88a6d755.exe"
1⤵
- Modifies registry class
PID:4556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4556-0-0x0000000000400000-0x000000000069D000-memory.dmp

Filesize
2.6MB

Download
memory/4556-1-0x0000000002480000-0x00000000024D4000-memory.dmp

Filesize
336KB

Download
memory/4556-2-0x00000000026D0000-0x00000000026D1000-memory.dmp

Filesize
4KB

Download
memory/4556-3-0x00000000026B0000-0x00000000026B1000-memory.dmp

Filesize
4KB

Download
memory/4556-4-0x0000000002700000-0x0000000002701000-memory.dmp

Filesize
4KB

Download
memory/4556-5-0x0000000002690000-0x0000000002691000-memory.dmp

Filesize
4KB

Download
memory/4556-6-0x0000000002680000-0x0000000002681000-memory.dmp

Filesize
4KB

Download
memory/4556-7-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4556-8-0x00000000026E0000-0x00000000026E1000-memory.dmp

Filesize
4KB

Download
memory/4556-9-0x0000000002720000-0x0000000002721000-memory.dmp

Filesize
4KB

Download
memory/4556-10-0x00000000026A0000-0x00000000026A1000-memory.dmp

Filesize
4KB

Download
memory/4556-11-0x0000000003680000-0x0000000003681000-memory.dmp

Filesize
4KB

Download
memory/4556-12-0x0000000003670000-0x0000000003673000-memory.dmp

Filesize
12KB

Download
memory/4556-13-0x0000000003710000-0x0000000003810000-memory.dmp

Filesize
1024KB

Download
memory/4556-14-0x0000000003710000-0x0000000003810000-memory.dmp

Filesize
1024KB

Download
memory/4556-15-0x0000000003710000-0x0000000003810000-memory.dmp

Filesize
1024KB

Download
memory/4556-16-0x0000000003710000-0x0000000003810000-memory.dmp

Filesize
1024KB

Download
memory/4556-17-0x0000000003710000-0x0000000003810000-memory.dmp

Filesize
1024KB

Download
memory/4556-18-0x0000000003710000-0x0000000003810000-memory.dmp

Filesize
1024KB

Download
memory/4556-19-0x0000000003710000-0x0000000003810000-memory.dmp

Filesize
1024KB

Download
memory/4556-20-0x0000000003710000-0x0000000003810000-memory.dmp

Filesize
1024KB

Download
memory/4556-21-0x00000000036C0000-0x00000000036C1000-memory.dmp

Filesize
4KB

Download
memory/4556-22-0x00000000036E0000-0x00000000036E1000-memory.dmp

Filesize
4KB

Download
memory/4556-23-0x0000000003710000-0x0000000003810000-memory.dmp

Filesize
1024KB

Download
memory/4556-24-0x0000000000400000-0x000000000069D000-memory.dmp

Filesize
2.6MB

Download
memory/4556-26-0x0000000002480000-0x00000000024D4000-memory.dmp

Filesize
336KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads