8a51ff198d830e356410a61c7ef2beb53fdbad828c549d05cb8a6d18e142a730

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11/05/2024, 16:34

Target

2024-05-11_d8f9be2b0abcee0eb439fdbc5bcbb907_bkransomware.exe
Size

2.9MB
MD5

d8f9be2b0abcee0eb439fdbc5bcbb907
SHA1

9d8b968f01db212a72f8485c210aa0968dc2724c
SHA256

8a51ff198d830e356410a61c7ef2beb53fdbad828c549d05cb8a6d18e142a730
SHA512

f5951336075ff8938f0a18f9fad9f7cd64809e23f29966984d877c283dd859fd89e6a553a96f18cb099f6bc1c06623af76690d1ea8cb2c8de78beefd0c439173
SSDEEP

49152:MrGahOBXrGpu5HOTNlj135DMnCIjtAybcY/b4w:xhHN55qC

Score

1^/10

Modifies registry class 5 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000_Classes\Applications\crashreporter.exe\NoOpenWith = "0"	2024-05-11_d8f9be2b0abcee0eb439fdbc5bcbb907_bkransomware.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000_Classes\Applications\crashreporter.exe\NoStartPage = "0"	2024-05-11_d8f9be2b0abcee0eb439fdbc5bcbb907_bkransomware.exe
Key created	\REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000_Classes\Applications	2024-05-11_d8f9be2b0abcee0eb439fdbc5bcbb907_bkransomware.exe
Key created	\REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000_Classes\Applications\crashreporter.exe	2024-05-11_d8f9be2b0abcee0eb439fdbc5bcbb907_bkransomware.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000_Classes\Applications\crashreporter.exe\IsHostApp = "0"	2024-05-11_d8f9be2b0abcee0eb439fdbc5bcbb907_bkransomware.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-11_d8f9be2b0abcee0eb439fdbc5bcbb907_bkransomware.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-11_d8f9be2b0abcee0eb439fdbc5bcbb907_bkransomware.exe"
1⤵
- Modifies registry class
PID:2340