00335ac2ede76fa9f1a1c7fce54cc57263c594bcf14708d752b6d5b88015332a

Analysis

max time kernel
147s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
29-02-2024 02:45

Target

_07F57D9CEFDA42F78AFA5E0E12E5A347.exe
Size

408KB
MD5

faf9720d90c9fc464709fa65565e9337
SHA1

e9c48b22fbc797659e054f753462717a27449e47
SHA256

34157aea467281aaa834115dee2f0a8364f36dcebccf38b073ae140c701f3d5c
SHA512

ede6ba17f8cb42a5c250417d9555c9c717dc8369a95dff37cb6f0aef4fd0867c5618ef2942dc7ca109c8c2d026bb3dfaf2b6c87e499f22fa9a70f57f96e7a329
SSDEEP

6144:TV+owB4pCHkRedrhvbeAOuEGGjYaMjbo8L+ZSe1QJkGZyB2D1v2pTnh:5+o8g4v6AOuGj+/o8qZPUvuTh

Score

1^/10

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.amv	_07F57D9CEFDA42F78AFA5E0E12E5A347.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.amv\ = "amvfile"	_07F57D9CEFDA42F78AFA5E0E12E5A347.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\amvfile	_07F57D9CEFDA42F78AFA5E0E12E5A347.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\amvfile\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\_07F57D9CEFDA42F78AFA5E0E12E5A347.exe,0"	_07F57D9CEFDA42F78AFA5E0E12E5A347.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\amvfile\Shell\Open\Command	_07F57D9CEFDA42F78AFA5E0E12E5A347.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\amvfile\Shell\Open\Command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\_07F57D9CEFDA42F78AFA5E0E12E5A347.exe %1"	_07F57D9CEFDA42F78AFA5E0E12E5A347.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\amvfile\ = "advance media video"	_07F57D9CEFDA42F78AFA5E0E12E5A347.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\amvfile\DefaultIcon	_07F57D9CEFDA42F78AFA5E0E12E5A347.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\amvfile\Shell	_07F57D9CEFDA42F78AFA5E0E12E5A347.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\amvfile\Shell\ = "Open"	_07F57D9CEFDA42F78AFA5E0E12E5A347.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\amvfile\Shell\Open	_07F57D9CEFDA42F78AFA5E0E12E5A347.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4436	_07F57D9CEFDA42F78AFA5E0E12E5A347.exe
4436	_07F57D9CEFDA42F78AFA5E0E12E5A347.exe