cba3b9e3ef90b4aee346711db40de213312d0af8158f20911c9994d885630306

Analysis

max time kernel
146s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
28/04/2024, 06:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

iasnap/iasnap.dll
Size

146KB
MD5

9159148d50715f59a725a977967898b7
SHA1

f5517daf900443dd6bc105359dc65886d6d554cd
SHA256

7c1dfb2b669a3346db1c72aa240aa0c8c11ae874f295957a4ae5225aea5ce338
SHA512

a7af2ee0bffe1a065ea9e5d221a335d92f6e3205bc57a06a9e5ad21bdf99f99d570b4402296cf17600ed723a7859a6b9dd51dcab75dc5e4904c90138e1b01ec1
SSDEEP

3072:h/snML9MjETSXzWRYrVmigq8SdquzxxTPYZczFZM2+ahI:hsMizWRY4igq8CrzxxTPYZjla

Score

1^/10

Malware Config

Signatures

Modifies registry class 48 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098AD-0CE6-11D1-BAAE-00C04FC2E20D}\Programmable	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098AD-0CE6-11D1-BAAE-00C04FC2E20D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098A7-0CE6-11D1-BAAE-00C04FC2E20D}\Programmable	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{01A3BF5C-CC93-4C12-A4C3-09B0BBE7F63F}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{6BC098A0-0CE6-11D1-BAAE-00C04FC2E20D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}\TypeLib\Version = "1.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}\TypeLib\ = "{6BC098A0-0CE6-11D1-BAAE-00C04FC2E20D}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC096E1-0CE6-11D1-BAAE-00C04FC2E20D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC096D5-0CE6-11D1-BAAE-00C04FC2E20D}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC096D5-0CE6-11D1-BAAE-00C04FC2E20D}\Version	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{01A3BF5C-CC93-4C12-A4C3-09B0BBE7F63F}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{6BC098A0-0CE6-11D1-BAAE-00C04FC2E20D}\1.0	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098AC-0CE6-11D1-BAAE-00C04FC2E20D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC096D5-0CE6-11D1-BAAE-00C04FC2E20D}\Programmable	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{01A3BF5C-CC93-4C12-A4C3-09B0BBE7F63F}\Programmable	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}\TypeLib\Version = "1.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC096E0-0CE6-11D1-BAAE-00C04FC2E20D}\Programmable	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC096E1-0CE6-11D1-BAAE-00C04FC2E20D}\Programmable	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}\TypeLib\ = "{6BC098A0-0CE6-11D1-BAAE-00C04FC2E20D}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098A5-0CE6-11D1-BAAE-00C04FC2E20D}\Programmable	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098A6-0CE6-11D1-BAAE-00C04FC2E20D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098A8-0CE6-11D1-BAAE-00C04FC2E20D}\Version	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{01A3BF5C-CC93-4C12-A4C3-09B0BBE7F63F}\Version	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098A9-0CE6-11D1-BAAE-00C04FC2E20D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{6BC098A0-0CE6-11D1-BAAE-00C04FC2E20D}\1.0\HELPDIR	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}\ = "IQualityControl"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC096D5-0CE6-11D1-BAAE-00C04FC2E20D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098A5-0CE6-11D1-BAAE-00C04FC2E20D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098A6-0CE6-11D1-BAAE-00C04FC2E20D}\Programmable	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098A8-0CE6-11D1-BAAE-00C04FC2E20D}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}\ = "IQualityControl"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6BC096AB-0CE6-11D1-BAAE-00C04FC2E20D}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC096E0-0CE6-11D1-BAAE-00C04FC2E20D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098AC-0CE6-11D1-BAAE-00C04FC2E20D}\Programmable	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098A7-0CE6-11D1-BAAE-00C04FC2E20D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098A8-0CE6-11D1-BAAE-00C04FC2E20D}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098A8-0CE6-11D1-BAAE-00C04FC2E20D}\Programmable	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098A9-0CE6-11D1-BAAE-00C04FC2E20D}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6BC098A9-0CE6-11D1-BAAE-00C04FC2E20D}\Version	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\iasnap\iasnap.dll
1⤵
- Modifies registry class
PID:3876

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads