IOC Report
be5bb7f05c4f8de4d393134b63af2e6bf8a05e3ad3fb3.exe

C:\Users\user\AppData\Local\Temp\154571\i

OpenPGP Secret Key

dropped

C:\Users\user\AppData\Local\Temp\Allah

data

dropped

C:\Users\user\AppData\Local\Temp\April

data

dropped

C:\Users\user\AppData\Local\Temp\Bass

OpenPGP Public Key

dropped

C:\Users\user\AppData\Local\Temp\Blake

data

dropped

C:\Users\user\AppData\Local\Temp\Category

data

dropped

C:\Users\user\AppData\Local\Temp\Compete

data

dropped

C:\Users\user\AppData\Local\Temp\Compile

data

dropped

C:\Users\user\AppData\Local\Temp\Concentration

OpenPGP Secret Key

dropped

C:\Users\user\AppData\Local\Temp\Correctly

data

dropped

C:\Users\user\AppData\Local\Temp\Ever

data

dropped

C:\Users\user\AppData\Local\Temp\Fellowship

data

dropped

C:\Users\user\AppData\Local\Temp\Founder

data

dropped

C:\Users\user\AppData\Local\Temp\Glasses

data

dropped

C:\Users\user\AppData\Local\Temp\Humor

ASCII text, with very long lines (408), with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\Humor.cmd

ASCII text, with very long lines (408), with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\Hz

data

dropped

C:\Users\user\AppData\Local\Temp\Intro

data

dropped

C:\Users\user\AppData\Local\Temp\Located

data

dropped

C:\Users\user\AppData\Local\Temp\Lt

OpenPGP Secret Key

dropped

C:\Users\user\AppData\Local\Temp\Miniature

data

dropped

C:\Users\user\AppData\Local\Temp\Optimize

data

dropped

C:\Users\user\AppData\Local\Temp\Pepper

data

dropped

C:\Users\user\AppData\Local\Temp\Pontiac

data

dropped

C:\Users\user\AppData\Local\Temp\Precipitation

data

dropped

C:\Users\user\AppData\Local\Temp\Previously

data

dropped

C:\Users\user\AppData\Local\Temp\Purchasing

data

dropped

C:\Users\user\AppData\Local\Temp\Scary

data

dropped

C:\Users\user\AppData\Local\Temp\Se

data

dropped

C:\Users\user\AppData\Local\Temp\Seek

data

dropped

C:\Users\user\AppData\Local\Temp\Sic

data

dropped

C:\Users\user\AppData\Local\Temp\Technologies

data

dropped

C:\Users\user\AppData\Local\Temp\Tion

data

dropped

C:\Users\user\AppData\Local\Temp\Tranny

data

dropped

C:\Users\user\AppData\Local\Temp\is-M0QJK.tmp\_isetup\_setup64.tmp

PE32+ executable (console) x86-64, for MS Windows

dropped

C:\Users\user\AppData\Local\Temp\is-SR5HU.tmp\_isetup\_setup64.tmp

PE32+ executable (console) x86-64, for MS Windows

dropped

C:\Users\user\AppData\Local\Temp\is-5MGM4.tmp\be5bb7f05c4f8de4d393134b63af2e6bf8a05e3ad3fb3.tmp

"C:\Users\user\AppData\Local\Temp\is-5MGM4.tmp\be5bb7f05c4f8de4d393134b63af2e6bf8a05e3ad3fb3.tmp" /SL5="$10422,3479677,781312,C:\Users\user\Desktop\be5bb7f05c4f8de4d393134b63af2e6bf8a05e3ad3fb3.exe"

C:\Program Files (x86)\StrLocalGate\Setup.exe

"C:\Program Files (x86)\StrLocalGate\Setup.exe"

C:\Users\user\AppData\Local\Temp\is-9OEDA.tmp\Setup.tmp

"C:\Users\user\AppData\Local\Temp\is-9OEDA.tmp\Setup.tmp" /SL5="$20426,920064,920064,C:\Program Files (x86)\StrLocalGate\Setup.exe"

C:\Windows\System32\conhost.exe

C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\tasklist.exe

tasklist

C:\Windows\SysWOW64\tasklist.exe

tasklist

C:\Windows\SysWOW64\timeout.exe

timeout 5