dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a

Analysis

max time kernel
41s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 09:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
Size

87KB
MD5

11fd43c5dd6eaa5132bae0378fb40d45
SHA1

8993e682dac6a34259e2c16142b2c1cf0cc86837
SHA256

dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a
SHA512

ded30e05ea6824dd89d8b747f348a6c06a7ec1245f0579455716f7de7bc939a00d8b45acc7429da5f61d72494f78377bf36863095d54cfc9dfb7efd4e841c352
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzgmE8PUlbTrZ:lV2BZVPlFlnxClFvLLcA+sPDzgmxC/d

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\UWhKGvH.com	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe

Drops file in Windows directory 15 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\Sims 2 codes.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File created	C:\Windows\win32dc\Sims 2 + hack.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File created	C:\Windows\win32dc\UT2004_cheat.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File opened for modification	C:\Windows\win32dc\UT2004_cheat.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File created	C:\Windows\win32dc\FlatOut(codes).exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File created	C:\Windows\win32dc\Sims 2 codes.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File created	C:\Windows\win32dc\BattleField 1942 fix.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File opened for modification	C:\Windows\win32dc\DAoC_patch.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File created	C:\Windows\win32dc\Silent Hill 4_nocd.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File created	C:\Windows\win32dc\FlatOut crack.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4_nocd.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File created	C:\Windows\win32dc\DAoC_patch.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File created	C:\Windows\win32dc\Quake3_trainer.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File opened for modification	C:\Windows\win32dc\Quake3_trainer.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
File created	C:\Windows\win32dc\Counter-Strike_cheat.exe	dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe

C:\Users\Admin\AppData\Local\Temp\dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe
"C:\Users\Admin\AppData\Local\Temp\dacfda66f1e688a87b686c2f831b2e77c1524971baec1f32b85a3c495fa41c5a.exe"
1⤵
- Drops file in System32 directory
- Drops file in Windows directory
PID:1504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1504-54-0x0000000075FB1000-0x0000000075FB3000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads