c469404c71deb01ec31be6cc60bac34c6662ed6e6f2024e99c02e4d9287db059

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28-02-2024 01:06

Target

aa9c7f0432f34ad6e9b8eaf13c97a290.exe
Size

48KB
MD5

aa9c7f0432f34ad6e9b8eaf13c97a290
SHA1

13ab566727bd2cb3ca3a56f359a4390c758f05fb
SHA256

c469404c71deb01ec31be6cc60bac34c6662ed6e6f2024e99c02e4d9287db059
SHA512

8a5476e22eb75d39919d080c8541e15cd00e93d7cc61b231ed6e4d46ba9ee0fd08581e042eea46783014bc0ac497434ce48f8e84b27d2df89ab161ce42780232
SSDEEP

768:9EyFqk0QHgowMiXTggyL0gnYChndCCr7uo8a6OewcJwn07s/lNeSVB9ba6rqqYDM:9jFqk0QHgz8gyLHnYChndCCr7uo8a6Hc

Score

5^/10

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\dllexp.dll	aa9c7f0432f34ad6e9b8eaf13c97a290.exe
File created	C:\Windows\SysWOW64\update.suc	aa9c7f0432f34ad6e9b8eaf13c97a290.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node	aa9c7f0432f34ad6e9b8eaf13c97a290.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID	aa9c7f0432f34ad6e9b8eaf13c97a290.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FDF59742-06D6-12D2-8D71-00A0C98B38E6}	aa9c7f0432f34ad6e9b8eaf13c97a290.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FDF59742-06D6-12D2-8D71-00A0C98B38E6}\InprocServer32\ = "C:\\Windows\\SysWow64\\dllexp.dll"	aa9c7f0432f34ad6e9b8eaf13c97a290.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FDF59742-06D6-12D2-8D71-00A0C98B38E6}\InprocServer32\ThreadingModel = "Apartment"	aa9c7f0432f34ad6e9b8eaf13c97a290.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FDF59742-06D6-12D2-8D71-00A0C98B38E6}\InprocServer32	aa9c7f0432f34ad6e9b8eaf13c97a290.exe

memory/2216-1-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download