ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8

Analysis

max time kernel
153s
max time network
159s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 01:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
Size

96KB
MD5

a1574f15b1229748b918a805f317a8c0
SHA1

f73d0fe94d225b3184b613e50fbb6f9908e9ad99
SHA256

ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8
SHA512

c375f2ad69a1390d0640f6f8d4e78284fd686a042cc1187f0ddc1553e1a870a543f3b2aef97e6afc2f648c06c318ef0d67f447e6ccaf99535b6bf201631abc91
SSDEEP

3072:LJfuq8IzyLHIDkbq1GtBg5t35IX4L2j/Oe:Nuq1yykb3C5f+/p

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 19 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\FlatOut + cheat.exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File opened for modification	C:\Windows\win32dc\FlatOut + cheat.exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File created	C:\Windows\win32dc\Doom 3_cheat.exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 + hack.exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File opened for modification	C:\Windows\win32dc\Sims 2(hack).exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2(serial).exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File created	C:\Windows\win32dc\DAoC + cheat.exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File opened for modification	C:\Windows\win32dc\DAoC + cheat.exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4(nocd).exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File opened for modification	C:\Windows\win32dc\Doom 3 hack.exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File created	C:\Windows\win32dc\Half-Life 2(serial).exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File created	C:\Windows\win32dc\Doom 3 hack.exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File created	C:\Windows\win32dc\FlatOut + nocd.exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File created	C:\Windows\win32dc\FlatOut + serial.exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File opened for modification	C:\Windows\win32dc\FlatOut + nocd.exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File opened for modification	C:\Windows\win32dc\FlatOut + serial.exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File created	C:\Windows\win32dc\Silent Hill 4(nocd).exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File created	C:\Windows\win32dc\BattleField 1942 + hack.exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
File created	C:\Windows\win32dc\Sims 2(hack).exe	ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe

C:\Users\Admin\AppData\Local\Temp\ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe
"C:\Users\Admin\AppData\Local\Temp\ebbebca82ad3f2cb491abe0d8f622639f558640fa10590ca5ab2b3c4f5ad94d8.exe"
1⤵
- Drops file in Windows directory
PID:1632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1632-54-0x0000000076091000-0x0000000076093000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads