7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82

Analysis

max time kernel
36s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/11/2022, 14:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
Size

90KB
MD5

03712be70cb820ac6631752238dc3a30
SHA1

4cfa4e00fb91683bf6505c424f70c7a3b9c2e1fd
SHA256

7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82
SHA512

fd6e228708e54d2b462f0d341b42bea8ae54f23198ec2964834682955465d09ac57576f7b2d1cbc3597ee6d7ec328012cdd41d757fd66177a4d55f6f41cca4ac
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDz7XeVkO8FKr40hhpqGE:lV2BZVPlFlnxClFvLLcA+sPDz7XeVk/B

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 19 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\Counter-Strike(codes).exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File created	C:\Windows\win32dc\BattleField 1942(patch).exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942(patch).exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File created	C:\Windows\win32dc\FlatOut_crack.exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File opened for modification	C:\Windows\win32dc\FlatOut_crack.exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File created	C:\Windows\win32dc\BattleField 1942_serial.exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File created	C:\Windows\win32dc\UT2004(fix).exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File created	C:\Windows\win32dc\Silent Hill 4_trainer.exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942_serial.exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File opened for modification	C:\Windows\dYoHIkyXFAziXPPnsi.com	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File created	C:\Windows\win32dc\Counter-Strike(codes).exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File created	C:\Windows\win32dc\DAoC + patch.exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File created	C:\Windows\win32dc\Counter-Strike_trainer.exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File created	C:\Windows\win32dc\DAoC_cdfix.exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File opened for modification	C:\Windows\win32dc\DAoC_cdfix.exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File created	C:\Windows\win32dc\Quake3_serial.exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File opened for modification	C:\Windows\win32dc\UT2004(fix).exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike_trainer.exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4_trainer.exe	7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe

C:\Users\Admin\AppData\Local\Temp\7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe
"C:\Users\Admin\AppData\Local\Temp\7d8dcf489baf541e1c3025d1f6aba60457126e4c4b075392da8c8f1b34e6af82.exe"
1⤵
- Drops file in Windows directory
PID:856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/856-54-0x0000000075D01000-0x0000000075D03000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads