6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5

Analysis

max time kernel
189s
max time network
191s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 00:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
Size

74KB
MD5

0103f370e36550b298dea6fffff2271a
SHA1

8785965b496ae3fa6ef8e078e9677f847cd8b0ef
SHA256

6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5
SHA512

c069422353931ee9e6612c3442136207d99562d9e943a96ebe6305a3fcba650607374487de4cdbfe888a04d4fc3c673b90f423144bc268fde2641377af7692c4
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDz77:lV2BZVPlFlnxClFvLLcA+sPDz77

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\hJmatdHCrpQhcucWAM.com	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe

Drops file in Windows directory 16 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\FlatOut fix.exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File created	C:\Windows\win32dc\BattleField 1942(codes).exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File created	C:\Windows\win32dc\Silent Hill 4_hack.exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File opened for modification	C:\Windows\win32dc\Quake3(codes).exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File opened for modification	C:\Windows\win32dc\Doom 3_cdfix.exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File created	C:\Windows\win32dc\Doom 3 hack.exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4_hack.exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File created	C:\Windows\win32dc\Sims 2 + fix.exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File opened for modification	C:\Windows\win32dc\Sims 2 + fix.exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File created	C:\Windows\win32dc\Counter-Strike + serial.exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942(codes).exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike + serial.exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File created	C:\Windows\win32dc\Counter-Strike patch.exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File created	C:\Windows\win32dc\Quake3(codes).exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File created	C:\Windows\win32dc\BattleField 1942_patch.exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
File created	C:\Windows\win32dc\Doom 3_cdfix.exe	6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe

C:\Users\Admin\AppData\Local\Temp\6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe
"C:\Users\Admin\AppData\Local\Temp\6340d4c8a8475955a76c847a05f7d8c9747fcf4ec433910d777c20f1943d07b5.exe"
1⤵
- Drops file in System32 directory
- Drops file in Windows directory
PID:1268

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads