Analysis
-
max time kernel
154s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 09:52
Static task
static1
Behavioral task
behavioral1
Sample
fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe
Resource
win10v2004-20220812-en
General
-
Target
fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe
-
Size
81KB
-
MD5
00fe8fe67b564880a9ba41e581d20d24
-
SHA1
2769dab86fd90611666776a23118e6888b2221e9
-
SHA256
fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c
-
SHA512
2d814d045326232044745315b0e4717b37101cde4aa23b8cc0d7e9cf05646fc8710ad8f641065944f620bfdb0dace5a68c70bfb1e20dc7098bb9339f2eefa28e
-
SSDEEP
1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDz7IaSs8Hkn5m2:lV2BZVPlFlnxClFvLLcA+sPDz7Iays
Malware Config
Signatures
-
Drops file in Windows directory 16 IoCs
description ioc Process File created C:\Windows\win32dc\DAoC(crack).exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File created C:\Windows\win32dc\FlatOut_hack.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File opened for modification C:\Windows\win32dc\Half-Life 2_hack.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File opened for modification C:\Windows\win32dc\Doom 3_hack.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File created C:\Windows\win32dc\Sims 2 trainer.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File created C:\Windows\win32dc\Counter-Strike_cheat.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File created C:\Windows\win32dc\Quake3 trainer.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File opened for modification C:\Windows\win32dc\Quake3 trainer.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File opened for modification C:\Windows\win32dc\DAoC(crack).exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File opened for modification C:\Windows\win32dc\FlatOut_hack.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File created C:\Windows\win32dc\Doom 3 hack.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File created C:\Windows\win32dc\Half-Life 2_hack.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File created C:\Windows\win32dc\Quake3 + cheat.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File created C:\Windows\win32dc\Quake3 + patch.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File opened for modification C:\Windows\win32dc\Doom 3 hack.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe File created C:\Windows\win32dc\Doom 3_hack.exe fcd858e92f533df1f692c01e918ee8f230e07dd84db3e289a4b6fd23afb4f00c.exe