50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34

Analysis

max time kernel
102s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
02/10/2022, 15:14 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
Size

80KB
MD5

70edaace41225bbe8d61431e80d8dac0
SHA1

25f7d626373c55b78a4ad800ec84cc3a54f9a965
SHA256

50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34
SHA512

1cd2a7da6a40a5b4926130dc61ab5def34f1cf62ac562d598942ef326a69b6617a4286147a1b799a58205cafce59f0b9af23231cc81fc8006baee38ffc7dfe5f
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzRtR4jMAH25G4s:lV2BZVPlFlnxClFvLLcA+sPDzv8MAH3n

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 19 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\FlatOut + hack.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\Half-Life 2 trainer.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\Silent Hill 4 + hack.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\Quake3 nocd.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File opened for modification	C:\Windows\win32dc\Quake3 nocd.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\DAoC nocd.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\FlatOut + hack.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\DAoC + trainer.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File opened for modification	C:\Windows\win32dc\Sims 2(trainer).exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\DAoC + hack.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\Half-Life 2_fix.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\FlatOut trainer.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File opened for modification	C:\Windows\win32dc\FlatOut trainer.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File opened for modification	C:\Windows\win32dc\DAoC nocd.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2 trainer.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File opened for modification	C:\Windows\win32dc\DAoC + hack.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4 + hack.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File created	C:\Windows\win32dc\Sims 2(trainer).exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2_fix.exe	50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe

C:\Users\Admin\AppData\Local\Temp\50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe
"C:\Users\Admin\AppData\Local\Temp\50e677338483aa7286be80d9f922d73e7996b3c2e83f68204347be0855378d34.exe"
1⤵
- Drops file in Windows directory
PID:1324

Network

No results found

93.184.220.29:80

260 B
5
93.184.220.29:80

322 B
7
93.184.220.29:80

260 B
5
20.42.73.24:443

322 B
7
178.79.208.1:80

322 B
7
104.80.225.205:443

322 B
7

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.