3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183

Analysis

max time kernel
40s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
14/10/2022, 09:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
Size

82KB
MD5

64c042f541843ef5564018a5cd200f80
SHA1

bfe10ae254aac73d2f6826aa08d9f924d31412c2
SHA256

3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183
SHA512

3bc93a565db3211d2d646a716a663aa075cfb084816a794756aaed9e775a320c009407846ad279e1cc26f1404bf5f0f194afa8a35d3243fd1e6dbf0ac281746d
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDz0tKHIyQrR6V:lV2BZVPlFlnxClFvLLcA+sPDz7

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 19 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\Doom 3_nocd.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\DAoC(serial).exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\BattleField 1942 + cheat.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 + cheat.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\Doom 3 fix.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\FlatOut_trainer.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\Quake3 cdfix.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\Quake3(cheat).exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\BattleField 1942_patch.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942_patch.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\Quake3(hack).exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\Quake3(hack).exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\DAoC_trainer.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\DAoC_trainer.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\Quake3 cdfix.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\DAoC(serial).exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\Doom 3 fix.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\Quake3(cheat).exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\Doom 3_nocd.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe

C:\Users\Admin\AppData\Local\Temp\3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
"C:\Users\Admin\AppData\Local\Temp\3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe"
1⤵
- Drops file in Windows directory
PID:1668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1668-54-0x0000000075071000-0x0000000075073000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads