f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01-12-2022 09:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
Size

88KB
MD5

04d694bf9fe4f40e2f370f1248519e6f
SHA1

5185c144b559868a951bbb7cbb5d4bff366b025c
SHA256

f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac
SHA512

6178601e833bef1ce44c8fde9ecb2a0834c470c2424c5c81826c5f7467cc96d8622566aa0805b42be394c790619696924f54a76ab022a8ed8324f4a60941e443
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDz7XeVkO8y7MLO:lV2BZVPlFlnxClFvLLcA+sPDz7XeVk/C

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 19 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\Counter-Strike + crack.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\win32dc\Sims 2(nocd).exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\Doom 3 + hack.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\FlatOut + codes.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\win32dc\DAoC_serial.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\Silent Hill 4 nocd.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\Counter-Strike + crack.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\BattleField 1942 cheat.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4_crack.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\UT2004 + cheat.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\Sims 2(nocd).exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\Quake3(cheat).exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\win32dc\FlatOut + codes.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 cheat.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\DAoC_serial.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File created	C:\Windows\win32dc\Silent Hill 4_crack.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\win32dc\UT2004 + cheat.exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\win32dc\Quake3(cheat).exe	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
File opened for modification	C:\Windows\REXQiIXRtDUFN.com	f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe

C:\Users\Admin\AppData\Local\Temp\f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe
"C:\Users\Admin\AppData\Local\Temp\f4abcaf1cf6e9ddb3c9c0e6db49254a65888783df49875c81b67706176fb56ac.exe"
1⤵
- Drops file in Windows directory
PID:1800

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads