d6129731391f088c7c219e2cf69fed6d71e769514e29e65c179116feba1d3d8d

Analysis

max time kernel
93s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 13:59

Target
$TEMP/modules/auxr.exe
Size 167KB
Sample240709-ragg2ayfke
SHA256 12dcade449a245fde61e11f3d6e5c32c2e470255912b1fd0feb0893e494b78b4
MD5 cf4183c8dfe4a248913aa8194da45445
SHA1 b9eb55afe266da98cd20f4a8127c48f4c70683f9
SHA512 57fae9faf2a8fcaf2ca5bf58dba46d418bfa2316448abc689cb13e5aa6fea61e6fd4407c639655bf7c2673ec983ed4d7a26c7011c3dae32f6ed1ba94d4eca392
SSDEEP 3072:2arKohsUfso/v8/8OyZowzZzLz7COIEPx86OIEPxK8D:UOsuk/0VzZzLz7COIEPxJOIEPxx
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Modifies Internet Explorer settings 1 TTPs 1 IoCs

Modify Registry

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1403246978-718555486-3105247137-1000\Software\Microsoft\Internet Explorer\MenuExt\&Access Internet Keyword	auxr.exe

C:\Users\Admin\AppData\Local\Temp\$TEMP\modules\auxr.exe
"C:\Users\Admin\AppData\Local\Temp\$TEMP\modules\auxr.exe"
1⤵
- Modifies Internet Explorer settings
PID:464

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact