bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda

Analysis

max time kernel
18s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 09:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
Size

84KB
MD5

1191dc682dc09b5836a016acbfbc8356
SHA1

4bd9072490989f42f3be8123469a0e0f51811cdd
SHA256

bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda
SHA512

bffcd1f92f20be17210013e0bb98cd250953c9fad95e7d68e64c7f73a006de43506949584132ff23fa5bb38d8443946217d3e85ec736d1a5036de61fd3af531d
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzR9h/5XSgdk:lV2BZVPlFlnxClFvLLcA+sPDzR9vG

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 18 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\Quake3 + patch.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File opened for modification	C:\Windows\win32dc\Quake3 + patch.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2 + trainer.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4 + nocd.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File created	C:\Windows\win32dc\Quake3 + cdfix.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File opened for modification	C:\Windows\win32dc\Doom 3 fix.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File created	C:\Windows\win32dc\Quake3(patch).exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File opened for modification	C:\Windows\win32dc\FlatOut_nocd.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File created	C:\Windows\win32dc\FlatOut_codes.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File created	C:\Windows\win32dc\Half-Life 2 hack.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike cheat.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File created	C:\Windows\win32dc\Silent Hill 4 + nocd.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File opened for modification	C:\Windows\win32dc\FlatOut_codes.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File created	C:\Windows\win32dc\Doom 3 fix.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File opened for modification	C:\Windows\win32dc\Quake3(patch).exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File created	C:\Windows\win32dc\FlatOut_nocd.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File created	C:\Windows\win32dc\Half-Life 2 + trainer.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
File created	C:\Windows\win32dc\Counter-Strike cheat.exe	bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe

C:\Users\Admin\AppData\Local\Temp\bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe
"C:\Users\Admin\AppData\Local\Temp\bc655210bf693f8692af590519a02df66576540427c1cc013a24807bb2b17bda.exe"
1⤵
- Drops file in Windows directory
PID:1836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1836-54-0x0000000075C51000-0x0000000075C53000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads