f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac

Analysis

max time kernel
153s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 09:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
Size

88KB
MD5

04d694bf9fe4f40e2f370f1248519e6f
SHA1

5185c144b559868a951bbb7cbb5d4bff366b025c
SHA256

f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac
SHA512

6178601e833bef1ce44c8fde9ecb2a0834c470c2424c5c81826c5f7467cc96d8622566aa0805b42be394c790619696924f54a76ab022a8ed8324f4a60941e443
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDz7XeVkO8y7MLO:lV2BZVPlFlnxClFvLLcA+sPDz7XeVk/C

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 17 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\Half-Life 2_hack.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\Quake3 + nocd.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\win32dc\Quake3 + nocd.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\UT2004_nocd.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942(nocd).exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\win32dc\UT2004 + cheat.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\UT2004 + trainer.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\BattleField 1942(nocd).exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\win32dc\DAoC(cdfix).exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\Half-Life 2_hack.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\Quake3_hack.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\win32dc\UT2004_nocd.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\FlatOut(nocd).exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\DAoC(cdfix).exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\win32dc\DAoC_serial.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\UT2004 + cheat.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\DAoC_serial.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe

C:\Users\Admin\AppData\Local\Temp\f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
"C:\Users\Admin\AppData\Local\Temp\f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe"
1⤵
- Drops file in Windows directory
PID:364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/364-54-0x0000000075131000-0x0000000075133000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads