cd10142b4cd46f126a024c30cc8014ec789fe990a95bda339a6a5206b7440a7a

Analysis

max time kernel
144s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
18/01/2024, 05:49

Target

64a1a24c98e26083b75c147fbfd2339b.exe
Size

135KB
MD5

64a1a24c98e26083b75c147fbfd2339b
SHA1

cab1e1da64f720f4e1f236c0bc02b46da4fc568d
SHA256

cd10142b4cd46f126a024c30cc8014ec789fe990a95bda339a6a5206b7440a7a
SHA512

246fef059949a2b46ff3351924c17992045f1907d429f77086b168aa37b72ff9dd4200589eeb30b898476738b11e05815f31416d138fa3dc9363282eacd54e8d
SSDEEP

3072:gnnv5QbYQbUZbbrZ6+m6NiL15+Eq7Kf3Wrar7arBYFoFwuuL9H4+B3aW:gv4YJQKN8Q2ZGStP9Yyd

Score

9^/10

Nirsoft 1 IoCs

resource	yara_rule
behavioral2/memory/244-10-0x0000000000400000-0x000000000042E000-memory.dmp	Nirsoft

Modifies registry class 3 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\	64a1a24c98e26083b75c147fbfd2339b.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile"	64a1a24c98e26083b75c147fbfd2339b.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.key	64a1a24c98e26083b75c147fbfd2339b.exe

C:\Users\Admin\AppData\Local\Temp\64a1a24c98e26083b75c147fbfd2339b.exe
"C:\Users\Admin\AppData\Local\Temp\64a1a24c98e26083b75c147fbfd2339b.exe"
1⤵
- Modifies registry class
PID:244

memory/244-0-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/244-1-0x0000000000600000-0x0000000000630000-memory.dmp

Filesize
192KB

Download
memory/244-2-0x0000000000630000-0x0000000000632000-memory.dmp

Filesize
8KB

Download
memory/244-3-0x00000000005F0000-0x00000000005F1000-memory.dmp

Filesize
4KB

Download
memory/244-4-0x0000000000640000-0x0000000000641000-memory.dmp

Filesize
4KB

Download
memory/244-6-0x00000000005E0000-0x00000000005E1000-memory.dmp

Filesize
4KB

Download
memory/244-5-0x00000000005D0000-0x00000000005D1000-memory.dmp

Filesize
4KB

Download
memory/244-7-0x0000000000680000-0x0000000000681000-memory.dmp

Filesize
4KB

Download
memory/244-8-0x0000000000670000-0x0000000000671000-memory.dmp

Filesize
4KB

Download
memory/244-9-0x0000000000660000-0x0000000000661000-memory.dmp

Filesize
4KB

Download
memory/244-10-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/244-11-0x0000000000600000-0x0000000000630000-memory.dmp

Filesize
192KB

Download