Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11/09/2024, 10:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe
Resource
win7-20240708-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe
-
Size
10KB
-
MD5
265d23b89f7d8da64893d621dec4dd30
-
SHA1
efe2df427df97d7a4f24a279bb561256777a8877
-
SHA256
d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd
-
SHA512
86082129344c168ab50447baa41f612c477a5637f564521f2c7ab002fcf1991fde9208cd9a7b0265b8d06449ab2ee58ed0b59ab09728857a027be5bfe9548b86
-
SSDEEP
192:0rS9hS7209c3NJmFgAYwujiSlMUd6xNV7H4IKcs:0r7Zc3NgFgAYvjiVUd67V0IKc
Score
1/10
Malware Config
Signatures
-
Modifies registry class 64 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\InprocServer32\1.0.0.0\Assembly = "SGControlNet2, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\MiscStatus\1\ = "131473" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\Control d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\ProgId\ = "SGControlNet2.SGView" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986} d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\InprocServer32\1.0.0.0\Assembly = "SGControlNet2, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\InprocServer32\RuntimeVersion = "v2.0.50727" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\InprocServer32 d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SGControlNet2.SGView\CLSID\ = "{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\InprocServer32\1.0.0.0\Class = "SGControlNet2.SGView" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\Implemented Categories d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\InprocServer32\1.0.0.0\CodeBase = "C:\\Users\\Admin\\AppData\\Local\\Temp\\SGControlNet2.dll" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SGControlNet2.SGControlReadOnly\CLSID d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\InprocServer32\1.0.0.0\RuntimeVersion = "v2.0.50727" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\InprocServer32\1.0.0.0\RuntimeVersion = "v2.0.50727" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\InprocServer32\1.0.0.0\CodeBase = "C:\\Users\\Admin\\AppData\\Local\\Temp\\SGControlNet2.dll" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\MiscStatus\1 d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29} d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\MiscStatus\1 d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\InprocServer32\1.0.0.0 d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\ProgId\ = "SGControlNet2.SGControl" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SGControlNet2.SGControlReadOnly\CLSID\ = "{7D88E911-BA39-33ED-865B-D5D1B6E30986}" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\InprocServer32\ThreadingModel = "Both" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\InprocServer32\Assembly = "SGControlNet2, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\InprocServer32\ThreadingModel = "Both" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\InprocServer32\Class = "SGControlNet2.SGControlReadOnly" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\InprocServer32\Assembly = "SGControlNet2, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C} d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\InprocServer32\Class = "SGControlNet2.SGControl" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\MiscStatus d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\ = "SGControlNet2.SGControl" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\ProgId d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\Implemented Categories d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SGControlNet2.SGControl d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\InprocServer32\ThreadingModel = "Both" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\InprocServer32\1.0.0.0\CodeBase = "C:\\Users\\Admin\\AppData\\Local\\Temp\\SGControlNet2.dll" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SGControlNet2.SGView d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\ = "SGControlNet2.SGView" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\ProgId d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\InprocServer32 d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\InprocServer32\ = "mscoree.dll" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\InprocServer32\RuntimeVersion = "v2.0.50727" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\InprocServer32\1.0.0.0\RuntimeVersion = "v2.0.50727" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\InprocServer32\1.0.0.0\Assembly = "SGControlNet2, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\ProgId d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SGControlNet2.SGControl\ = "SGControlNet2.SGControl" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SGControlNet2.SGControl\CLSID d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\MiscStatus d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\InprocServer32\1.0.0.0 d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SGControlNet2.SGControlReadOnly d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\ = "SGControlNet2.SGControlReadOnly" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\ProgId\ = "SGControlNet2.SGControlReadOnly" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\MiscStatus\1\ = "131473" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\InprocServer32 d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\InprocServer32\ = "mscoree.dll" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SGControlNet2.SGView\CLSID d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B} d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\InprocServer32\Class = "SGControlNet2.SGView" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDF436B1-78E2-3994-BCF7-FFCA6E6AFC8B}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29} d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D88E911-BA39-33ED-865B-D5D1B6E30986}\InprocServer32\ = "mscoree.dll" d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\InprocServer32\1.0.0.0 d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5D45E41F-8984-3E73-97FE-F14E7E57D59C}\Implemented Categories d4100729a83281de6fc8977565f8205c92c92ff6a954d5330ee2f8cdb9fcb8bd.exe