b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748

Analysis

max time kernel
151s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
20/10/2022, 01:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
Size

87KB
MD5

a12e83857d32ec6f68b7438807059b30
SHA1

0cef3d0a4dee2718cc4f2abf78cba9438edc30b8
SHA256

b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748
SHA512

eb41511e714a8871da2df8a3f85ea266f07eb8f99a8a0f27294f4b2db38e1bdd14664056c164f0a5ae55264753a8747c35ec419234d16d06acd5d6436ce038a3
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzkWbxFRfjhHxBvyrg:lV2BZVPlFlnxClFvLLcA+sPDz7tffJ6g

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 18 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\DAoC_cheat.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File created	C:\Windows\win32dc\Doom 3_cdfix.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File created	C:\Windows\win32dc\UT2004_codes.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2_hack.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4 + serial.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File opened for modification	C:\Windows\win32dc\Doom 3 codes.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942_fix.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File opened for modification	C:\Windows\win32dc\UT2004_codes.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File created	C:\Windows\win32dc\UT2004 + patch.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File created	C:\Windows\win32dc\Silent Hill 4 + serial.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File created	C:\Windows\win32dc\Half-Life 2(cheat).exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File created	C:\Windows\win32dc\Doom 3 codes.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File opened for modification	C:\Windows\win32dc\DAoC_cheat.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File created	C:\Windows\win32dc\DAoC + patch.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File opened for modification	C:\Windows\win32dc\UT2004 + patch.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File created	C:\Windows\win32dc\Half-Life 2_hack.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File created	C:\Windows\win32dc\BattleField 1942_fix.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
File opened for modification	C:\Windows\win32dc\Doom 3_cdfix.exe	b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe

C:\Users\Admin\AppData\Local\Temp\b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe
"C:\Users\Admin\AppData\Local\Temp\b1f833ecae1f80be0262be6f470e493bb6520d4ab085fffd3dff941172bb0748.exe"
1⤵
- Drops file in Windows directory
PID:2280

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads