Analysis
-
max time kernel
154s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/10/2022, 15:15
Static task
static1
Behavioral task
behavioral1
Sample
90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe
Resource
win10v2004-20220812-en
General
-
Target
90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe
-
Size
87KB
-
MD5
7a890c6596e577c6bcf0c1f98af9b881
-
SHA1
62d96309461924552c60becc98061fd4bc831550
-
SHA256
90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d
-
SHA512
8022aecbcdce1bcc3609723b98b28ec5d159247793d2b2f4ad80c9547b23e243ae2eab426babcbc134ec469a6ec0cbf342d0a03acbb98aabc015f9011d79f12e
-
SSDEEP
1536:rnMq9kOQCYwsIPB8yAGVVyLH5GxVkbq10MyxobJl42r5jlw5yIAkglt0v:LJfuq8IzyLHIDkbq1GGbJlRrFl2yIFg0
Malware Config
Signatures
-
Drops file in Windows directory 17 IoCs
description ioc Process File created C:\Windows\win32dc\BattleField 1942(nocd).exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File created C:\Windows\win32dc\Counter-Strike serial.exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File created C:\Windows\win32dc\DAoC trainer.exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File created C:\Windows\win32dc\BattleField 1942(crack).exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File created C:\Windows\win32dc\Silent Hill 4_hack.exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File opened for modification C:\Windows\win32dc\Doom 3(cdfix).exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File created C:\Windows\win32dc\Half-Life 2 patch.exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File created C:\Windows\win32dc\Doom 3 cdfix.exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File created C:\Windows\win32dc\Counter-Strike cdfix.exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File opened for modification C:\Windows\win32dc\BattleField 1942(nocd).exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File created C:\Windows\win32dc\Half-Life 2 serial.exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File opened for modification C:\Windows\win32dc\Half-Life 2 serial.exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File opened for modification C:\Windows\win32dc\DAoC trainer.exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File opened for modification C:\Windows\win32dc\Counter-Strike serial.exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File opened for modification C:\Windows\win32dc\Half-Life 2 patch.exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File opened for modification C:\Windows\win32dc\Silent Hill 4_hack.exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe File created C:\Windows\win32dc\Doom 3(cdfix).exe 90c41e3cb302f927632716f7bb086c13d2e0795606c4f2af59510c4f1925209d.exe