Analysis
-
max time kernel
42s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
30/10/2022, 14:44
Static task
static1
Behavioral task
behavioral1
Sample
47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe
Resource
win10v2004-20220812-en
General
-
Target
47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe
-
Size
66KB
-
MD5
a3b08e599acdcbc72272d06c3a9525eb
-
SHA1
40890c760b119fdf8730a17704677d653b3538a4
-
SHA256
47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816
-
SHA512
00b8673ada0120f66f5a4062a70d3560cbf07c8683b1618f6dbfd126a6bc9915173f270a638211115f0768d66daa99911aa7f571765b1d14222a2e60c3df9db3
-
SSDEEP
1536:rnMq9kOQCYwsIPB8yAGVVyLH5GxVkbq1Cl/N7QAWQyvHIg:LJfuq8IzyLHIDkbq1CwARyvHIg
Malware Config
Signatures
-
Drops file in Windows directory 15 IoCs
description ioc Process File opened for modification C:\Windows\win32dc\DAoC(hack).exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File created C:\Windows\win32dc\DAoC(nocd).exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File opened for modification C:\Windows\win32dc\DAoC(nocd).exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File created C:\Windows\win32dc\UT2004 cdfix.exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File created C:\Windows\win32dc\Doom 3(hack).exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File created C:\Windows\win32dc\Half-Life 2 + fix.exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File created C:\Windows\win32dc\UT2004 hack.exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File created C:\Windows\win32dc\UT2004 + trainer.exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File opened for modification C:\Windows\win32dc\UT2004 cdfix.exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File created C:\Windows\win32dc\Half-Life 2 + patch.exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File opened for modification C:\Windows\win32dc\Half-Life 2 + fix.exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File opened for modification C:\Windows\win32dc\UT2004 + trainer.exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File created C:\Windows\win32dc\DAoC + cdfix.exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File opened for modification C:\Windows\win32dc\DAoC + cdfix.exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe File created C:\Windows\win32dc\DAoC(hack).exe 47f1d00d83514625dd1a74b507505e619f6ebab87a68a6ffd12c47a9a703f816.exe