ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031

Analysis

max time kernel
190s
max time network
204s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
30-11-2022 23:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
Size

83KB
MD5

103727281e8e6b55d5a0231a50c6fcc9
SHA1

79d82bf3e5d0c8957f4c6ed3388e9d58022d910a
SHA256

ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031
SHA512

8472b4f50f5e4acc7d3434c6d83645e1da12b63921f50287376bfd66202d10070ab6a9ca299ed131839de310985b0aaa62f73e94ea85d0760ea4a7f05627c90b
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzhagQts0W+2hHd22v:lV2BZVPlFlnxClFvLLcA+sPDzhagaeZ5

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 16 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\FlatOut(nocd).exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File opened for modification	C:\Windows\win32dc\FlatOut_codes.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2_nocd.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File created	C:\Windows\win32dc\Doom 3 trainer.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File created	C:\Windows\win32dc\Counter-Strike hack.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike hack.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File created	C:\Windows\win32dc\Half-Life 2_hack.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File created	C:\Windows\win32dc\Doom 3 fix.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File opened for modification	C:\Windows\win32dc\Quake3 + crack.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File opened for modification	C:\Windows\win32dc\DAoC_cheat.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File created	C:\Windows\win32dc\Quake3 + crack.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File created	C:\Windows\win32dc\Half-Life 2_nocd.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File created	C:\Windows\win32dc\DAoC_cheat.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File created	C:\Windows\win32dc\FlatOut_codes.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File created	C:\Windows\win32dc\Sims 2 cheat.exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
File created	C:\Windows\win32dc\FlatOut(nocd).exe	ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe

C:\Users\Admin\AppData\Local\Temp\ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe
"C:\Users\Admin\AppData\Local\Temp\ece7d8da14e015f17aabda49a36aa38be4051121ce2457f4e6ceb4336a291031.exe"
1⤵
- Drops file in Windows directory
PID:3160

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads