917e612d047e206ba34b1ea9e86aea416c64056fb23726ea3e9c700ffc9a5ade | Triage

Analysis

max time kernel
117s
max time network
123s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
01/09/2024, 14:57

Sharing

Report Analysis Logs

General

Target

BetterDesktopSorting.exe
Size

58KB
MD5

2443717fce4a603cc03dc888a1ba61b6
SHA1

e34cc0189cae303fdff79e0b288735d33dcb2433
SHA256

917e612d047e206ba34b1ea9e86aea416c64056fb23726ea3e9c700ffc9a5ade
SHA512

8b0e631be1fef6956b2777daacbaeee4ebb6e49957e134a71a6475c2a3d16dd1ad9fa4ee50e958af03809799bcd701fd08cb07263baaec5e0caff695901fc644
SSDEEP

1536:+4M7WdLFZCRUqvaLz1gWbbFmxEx1Cnpl:FtdLvMUM81gI4xEx1Cf

Score

1^/10

Malware Config

Signatures

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\Background\shell\BetterDesktopSorting	BetterDesktopSorting.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\Background\shell\BetterDesktopSorting\command	BetterDesktopSorting.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\Background\shell\BetterDesktopSorting\command\(Default) = " \"C:\\Users\\Xavier Boudreau\\Downloads\\BetterDesktopSorting-main\\BetterDesktopSorting-main\\x64\\Debug\\BetterDesktopSorting.exe\" "	BetterDesktopSorting.exe

C:\Users\Admin\AppData\Local\Temp\BetterDesktopSorting.exe
"C:\Users\Admin\AppData\Local\Temp\BetterDesktopSorting.exe"
1⤵
- Modifies registry class
PID:1876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1876-0-0x00000000001A0000-0x00000000001B0000-memory.dmp

Filesize
64KB

Download