6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4

Analysis

max time kernel
172s
max time network
201s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11/10/2022, 19:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
Size

67KB
MD5

53a8352afb96058e056f3f0d6406d440
SHA1

3272678b3e5bf1d7df2725a66a307d044079eeab
SHA256

6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4
SHA512

ea4bf71e57653c4411126c685f9078a5a6be108a96d0296a8a83a2e3b7f4ff1df8ced3446178b45d8106ce994456ede60d37f0a1e0935056fc97473405814b6b
SSDEEP

1536:rnMq9kOQCYwsIPB8yAGVVyLH5GxVkbq1SrsA8L7lILs:LJfuq8IzyLHIDkbq1SAAYX

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 18 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\Doom 3(serial).exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File created	C:\Windows\win32dc\Sims 2 + codes.exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File opened for modification	C:\Windows\win32dc\Sims 2 + codes.exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File created	C:\Windows\win32dc\Counter-Strike(hack).exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike(hack).exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File created	C:\Windows\win32dc\BattleField 1942(patch).exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File created	C:\Windows\win32dc\Sims 2_trainer.exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File opened for modification	C:\Windows\win32dc\Sims 2_trainer.exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File created	C:\Windows\win32dc\BattleField 1942 nocd.exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File created	C:\Windows\win32dc\UT2004(patch).exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File opened for modification	C:\Windows\win32dc\UT2004(patch).exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File created	C:\Windows\win32dc\UT2004 + cheat.exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File opened for modification	C:\Windows\win32dc\UT2004 + cheat.exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File created	C:\Windows\win32dc\Sims 2 + fix.exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File opened for modification	C:\Windows\win32dc\Sims 2 + fix.exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File created	C:\Windows\win32dc\Quake3_codes.exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File opened for modification	C:\Windows\win32dc\Quake3_codes.exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942(patch).exe	6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe

C:\Users\Admin\AppData\Local\Temp\6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe
"C:\Users\Admin\AppData\Local\Temp\6b34d13c038ff003d73d61362687a21d8ca4d8d99f094dc415eca956d69d68d4.exe"
1⤵
- Drops file in Windows directory
PID:1956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1956-54-0x00000000758C1000-0x00000000758C3000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads