81ccb5f299a8e6e97dc8d87a428ad65cf96f2b2ce9a0c9a3410d7e5bf49882a6 | Triage

Analysis

max time kernel
15s
max time network
16s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
10-08-2024 05:06

Sharing

Report Analysis Logs

General

Target

8GB Ram.reg
Size

166B
MD5

5631f9da1a812bc35decd62325fa18e8
SHA1

3d0dc9abafd205617fff42336a93d16c4b84a1d4
SHA256

81ccb5f299a8e6e97dc8d87a428ad65cf96f2b2ce9a0c9a3410d7e5bf49882a6
SHA512

c0c451f9a6bc9b6c9273606d1ad2be67ed1ee0e6bb9bfffa9b9679e39462560931f3933888baa26f97a7f8b05f077799467208b1c35e8e10ec91886c2a53bbf2

Score

1^/10

Malware Config

Signatures

Runs .reg file with regedit 1 IoCs

pid	Process
2532	regedit.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2532	regedit.exe

C:\Windows\regedit.exe
regedit.exe "C:\Users\Admin\AppData\Local\Temp\8GB Ram.reg"
1⤵
- Runs .reg file with regedit
- Suspicious use of FindShellTrayWindow
PID:2532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2532-0-0x0000000001B40000-0x0000000001B41000-memory.dmp

Filesize
4KB

Download