a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d

Analysis

max time kernel
41s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11/10/2022, 09:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
Size

78KB
MD5

6126015391bcb96f562fb5077e7911a7
SHA1

9089f77ac32f5a727a2b32cdd79db7e4bf916356
SHA256

a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d
SHA512

e16c281e3e716804c323e89b024f29e0985b5e1234c4ac601b4e9d1f72588b8850509cea6ee1add38757f4f0441718479c94124c0c80d1ff1b180322930c9a91
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDz0GxCm:lV2BZVPlFlnxClFvLLcA+sPDzVr

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 19 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\FlatOut(codes).exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File created	C:\Windows\win32dc\FlatOut cheat.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File opened for modification	C:\Windows\win32dc\FlatOut + fix.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File created	C:\Windows\win32dc\BattleField 1942 crack.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File created	C:\Windows\win32dc\Half-Life 2 patch.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2 patch.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File created	C:\Windows\win32dc\Sims 2 serial.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File created	C:\Windows\win32dc\FlatOut + fix.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File created	C:\Windows\win32dc\Doom 3 + crack.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File opened for modification	C:\Windows\win32dc\Doom 3 + crack.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File created	C:\Windows\win32dc\Doom 3 crack.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File opened for modification	C:\Windows\win32dc\Doom 3 crack.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File created	C:\Windows\win32dc\Quake3 trainer.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File opened for modification	C:\Windows\win32dc\Quake3 trainer.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File opened for modification	C:\Windows\safOvXayScmbSnYCbkMB.com	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File created	C:\Windows\win32dc\FlatOut(codes).exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File created	C:\Windows\win32dc\Sims 2(nocd).exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File opened for modification	C:\Windows\win32dc\Sims 2(nocd).exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
File opened for modification	C:\Windows\win32dc\Sims 2 serial.exe	a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe

C:\Users\Admin\AppData\Local\Temp\a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe
"C:\Users\Admin\AppData\Local\Temp\a2b5a291635f6b81e62f347c259e1963a20a1414a741f284aec31597a242b61d.exe"
1⤵
- Drops file in Windows directory
PID:2016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2016-54-0x00000000761F1000-0x00000000761F3000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads