969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49

Analysis

max time kernel
208s
max time network
237s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
29/11/2022, 14:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
Size

82KB
MD5

0fea7479ea692a6c5f014b96c2b48000
SHA1

c9ad01aee1a0285d15ad6a472bc19e3b897ce4c4
SHA256

969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49
SHA512

3afb63f12d775b69cd2029215c78683a0238a3755f862daa2570bf2684f25afafa27c6fb57bb16d06295f2a23870fd7cf7c1fbb4156c1f5349f2ab2c9f2539c3
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzpNUibYz7KsrQxg:lV2BZVPlFlnxClFvLLcA+sPDzpJk7vrP

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 17 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\BattleField 1942_fix.exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File created	C:\Windows\win32dc\UT2004(serial).exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File created	C:\Windows\win32dc\Quake3_cheat.exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4(crack).exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File created	C:\Windows\win32dc\BattleField 1942_fix.exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File created	C:\Windows\win32dc\FlatOut_hack.exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File created	C:\Windows\win32dc\FlatOut_serial.exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File opened for modification	C:\Windows\win32dc\Quake3_cheat.exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File created	C:\Windows\win32dc\BattleField 1942 hack.exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2(nocd).exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File created	C:\Windows\win32dc\BattleField 1942 fix.exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File opened for modification	C:\Windows\win32dc\UT2004(serial).exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File created	C:\Windows\win32dc\Quake3_fix.exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File opened for modification	C:\Windows\win32dc\Quake3_fix.exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File created	C:\Windows\win32dc\Silent Hill 4(crack).exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File created	C:\Windows\win32dc\Half-Life 2(nocd).exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
File opened for modification	C:\Windows\win32dc\FlatOut_hack.exe	969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe

C:\Users\Admin\AppData\Local\Temp\969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe
"C:\Users\Admin\AppData\Local\Temp\969562d4c28ece3216abdd3717ec49a190907f3d61591c2eec94c41e2c9aef49.exe"
1⤵
- Drops file in Windows directory
PID:4196

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads