a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950

Analysis

max time kernel
184s
max time network
192s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 09:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
Size

80KB
MD5

1299d683a974383ff08f1e512aec414c
SHA1

62e49707767f0f2face0a53c0df94edc22cd8fcb
SHA256

a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950
SHA512

4709b47f447de5e3c1c4f4f58eaa19fe8e98fb640451ddffecd0364ca1424c8d842ec09a67b96f271facfc2992d15b17e886adb8b803c04a3def8945308a7069
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDz7IaSs8HknN7j:lV2BZVPlFlnxClFvLLcA+sPDz7IayKj

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 17 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\Counter-Strike + fix.exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike + fix.exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File created	C:\Windows\win32dc\Doom 3 codes.exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File created	C:\Windows\win32dc\Doom 3_hack.exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File created	C:\Windows\win32dc\Sims 2 fix.exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File created	C:\Windows\win32dc\Silent Hill 4(codes).exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4(codes).exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File created	C:\Windows\win32dc\Half-Life 2(cdfix).exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2(cdfix).exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File created	C:\Windows\win32dc\FlatOut_nocd.exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File created	C:\Windows\win32dc\BattleField 1942 + cheat.exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File created	C:\Windows\win32dc\BattleField 1942 nocd.exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 nocd.exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File opened for modification	C:\Windows\win32dc\FlatOut_nocd.exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 + cheat.exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File opened for modification	C:\Windows\win32dc\Doom 3 codes.exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
File created	C:\Windows\win32dc\Silent Hill 4 serial.exe	a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe

C:\Users\Admin\AppData\Local\Temp\a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
"C:\Users\Admin\AppData\Local\Temp\a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe"
1⤵
- Drops file in Windows directory
PID:2488

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads