4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214

Analysis

max time kernel
152s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03-10-2022 02:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
Size

97KB
MD5

6dfa95f28c5cd4162ef9b3ff457d46ac
SHA1

9603ff43238f36ac55cd4dcb6e3076e7c4e24aa9
SHA256

4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214
SHA512

c3ded6303ed8bd4ee9d8162fe66591f59798379182db8d140fc115cd87d1c32dedbf8ed6bc32b4fadab33f59215a834ea22caabb16f898202d824bab85356d52
SSDEEP

3072:lV2BZVPlFlnxClFvLLcA+sPDzGvxyn9SAEs:bQrNFxwjF+UGvxynus

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 17 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\Doom 3 patch.exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File created	C:\Windows\win32dc\Quake3 nocd.exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File opened for modification	C:\Windows\win32dc\FlatOut cheat.exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2 + serial.exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File opened for modification	C:\Windows\win32dc\Quake3(cdfix).exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File created	C:\Windows\win32dc\Doom 3 patch.exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File created	C:\Windows\win32dc\Sims 2 trainer.exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File created	C:\Windows\win32dc\FlatOut cheat.exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File created	C:\Windows\win32dc\Doom 3 + hack.exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File created	C:\Windows\win32dc\Doom 3_codes.exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File created	C:\Windows\win32dc\Doom 3_nocd.exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File created	C:\Windows\win32dc\Half-Life 2 + serial.exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File opened for modification	C:\Windows\win32dc\Doom 3_codes.exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File opened for modification	C:\Windows\win32dc\Doom 3_nocd.exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File created	C:\Windows\win32dc\Sims 2(cheat).exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File opened for modification	C:\Windows\win32dc\Sims 2(cheat).exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
File created	C:\Windows\win32dc\Quake3(cdfix).exe	4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe

C:\Users\Admin\AppData\Local\Temp\4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe
"C:\Users\Admin\AppData\Local\Temp\4ef3fa12ee2925d31a425c29c79fdac7eaba407c9df160239e3caf4a8fe2a214.exe"
1⤵
- Drops file in Windows directory
PID:2044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2044-54-0x0000000075F81000-0x0000000075F83000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads