Analysis
-
max time kernel
243s -
max time network
337s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
01-12-2022 09:55
Static task
static1
Behavioral task
behavioral1
Sample
b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe
Resource
win10v2004-20220812-en
General
-
Target
b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe
-
Size
86KB
-
MD5
05bc541939daf6dfd18e58967b4a5c37
-
SHA1
9b31233b3777a3771a2030e9bd43e95cfe8351d8
-
SHA256
b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44
-
SHA512
663ff59c160af474387f9e7d90e060cde74b2efcf1caf036126ea78f729a7c61c2b2e291b427346fdb6d26b0aebe6976ed13c2633a81a6617e07b8d8d9984c75
-
SSDEEP
1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzhagZXZ5ay:lV2BZVPlFlnxClFvLLcA+sPDzhaghZR
Malware Config
Signatures
-
Drops file in Windows directory 16 IoCs
description ioc Process File opened for modification C:\Windows\win32dc\Doom 3_nocd.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File opened for modification C:\Windows\win32dc\Counter-Strike_fix.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File created C:\Windows\win32dc\Doom 3_nocd.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File created C:\Windows\win32dc\BattleField 1942_crack.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File opened for modification C:\Windows\win32dc\Silent Hill 4_cheat.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File opened for modification C:\Windows\win32dc\Quake3 nocd.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File opened for modification C:\Windows\win32dc\Sims 2 cheat.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File created C:\Windows\win32dc\FlatOut cdfix.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File created C:\Windows\win32dc\Quake3 nocd.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File created C:\Windows\win32dc\UT2004(codes).exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File created C:\Windows\win32dc\Doom 3 patch.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File opened for modification C:\Windows\win32dc\Doom 3 patch.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File created C:\Windows\win32dc\Sims 2 cheat.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File created C:\Windows\win32dc\Counter-Strike_fix.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File created C:\Windows\win32dc\Silent Hill 4_cheat.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe File created C:\Windows\win32dc\Quake3 cheat.exe b0f75851acab9cc897c43cfa2eb5cbd6a068cd720c425fa9f029cb55d1e5cf44.exe