b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf

Analysis

max time kernel
152s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2022, 09:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
Size

80KB
MD5

6bbadd038a3c544d0713e6a1349ddee0
SHA1

e78562adaa9d337a96bf281751bd8db5c02a2814
SHA256

b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf
SHA512

aee314c016e6606a805e79337b6892d98d1fb40d923fb8688ba4a8028568d12d126ee4f03692e74e27df017c0c32caa65ec5f904b72e8d4a0bb75c35f644efec
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzkWbxFRfj1X:lV2BZVPlFlnxClFvLLcA+sPDz7tff1

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 18 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\Half-Life 2 + codes.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File created	C:\Windows\win32dc\UT2004 patch.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File opened for modification	C:\Windows\win32dc\Quake3 + cdfix.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File created	C:\Windows\win32dc\DAoC cdfix.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File created	C:\Windows\win32dc\Counter-Strike + cdfix.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File created	C:\Windows\win32dc\Half-Life 2 + codes.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File created	C:\Windows\win32dc\DAoC + nocd.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File opened for modification	C:\Windows\win32dc\DAoC cdfix.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File created	C:\Windows\win32dc\Silent Hill 4 + patch.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4_nocd.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4 + patch.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File created	C:\Windows\win32dc\DAoC_crack.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File opened for modification	C:\Windows\win32dc\UT2004 patch.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File opened for modification	C:\Windows\win32dc\DAoC_crack.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File created	C:\Windows\win32dc\Quake3 + cdfix.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File created	C:\Windows\win32dc\BattleField 1942 fix.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 fix.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
File created	C:\Windows\win32dc\Silent Hill 4_nocd.exe	b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe

C:\Users\Admin\AppData\Local\Temp\b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe
"C:\Users\Admin\AppData\Local\Temp\b8c9f760f4cb580252f4e95099fae2fe0e72dd9f5dcf6030192f696ac8ab65cf.exe"
1⤵
- Drops file in Windows directory
PID:4644

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads