3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183

Analysis

max time kernel
152s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
14/10/2022, 09:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
Size

82KB
MD5

64c042f541843ef5564018a5cd200f80
SHA1

bfe10ae254aac73d2f6826aa08d9f924d31412c2
SHA256

3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183
SHA512

3bc93a565db3211d2d646a716a663aa075cfb084816a794756aaed9e775a320c009407846ad279e1cc26f1404bf5f0f194afa8a35d3243fd1e6dbf0ac281746d
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDz0tKHIyQrR6V:lV2BZVPlFlnxClFvLLcA+sPDz7

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 18 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\FlatOut + serial.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\FlatOut + serial.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\FlatOut(trainer).exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\FlatOut(trainer).exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\Doom 3_cheat.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\FlatOut_fix.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\Half-Life 2_cheat.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942(nocd).exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\UT2004 + codes.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\UT2004 + codes.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2_patch.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\Silent Hill 4 + patch.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\Counter-Strike + codes.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\BattleField 1942(nocd).exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\FlatOut_fix.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File created	C:\Windows\win32dc\Half-Life 2_patch.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2_cheat.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
File opened for modification	C:\Windows\win32dc\Doom 3_cheat.exe	3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe

C:\Users\Admin\AppData\Local\Temp\3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe
"C:\Users\Admin\AppData\Local\Temp\3d991ee4d6f55014ea46832a15092810a556585c4577374e67d521a28d5f5183.exe"
1⤵
- Drops file in Windows directory
PID:4568

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads