50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34

Analysis

max time kernel
37s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
02/10/2022, 15:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
Size

80KB
MD5

70edaace41225bbe8d61431e80d8dac0
SHA1

25f7d626373c55b78a4ad800ec84cc3a54f9a965
SHA256

50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34
SHA512

1cd2a7da6a40a5b4926130dc61ab5def34f1cf62ac562d598942ef326a69b6617a4286147a1b799a58205cafce59f0b9af23231cc81fc8006baee38ffc7dfe5f
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzRtR4jMAH25G4s:lV2BZVPlFlnxClFvLLcA+sPDzv8MAH3n

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 15 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\Counter-Strike + hack.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\BattleField 1942 codes.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\Quake3 + patch.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File opened for modification	C:\Windows\win32dc\Quake3 + patch.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\UT2004 + fix.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2 + patch.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\Counter-Strike + hack.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 + cdfix.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\BattleField 1942 + crack.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File opened for modification	C:\Windows\win32dc\Doom 3 + cheat.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File opened for modification	C:\Windows\win32dc\FlatOut(trainer).exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\Doom 3 + cheat.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\Half-Life 2 + patch.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\FlatOut(trainer).exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\BattleField 1942 + cdfix.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe

C:\Users\Admin\AppData\Local\Temp\50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
"C:\Users\Admin\AppData\Local\Temp\50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe"
1⤵
- Drops file in Windows directory
PID:1248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1248-54-0x0000000075351000-0x0000000075353000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads