8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e

Analysis

max time kernel
152s
max time network
37s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 09:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
Size

91KB
MD5

14ba99bb459c598147b4b8fe6ed524a5
SHA1

3e63266ebecafddfff57adc2bfb1991e15e5d773
SHA256

8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e
SHA512

2e077ff6f71cd10a9a840bb4ad3445736b0138160b2f17d4dff360910393d5181263265783af427311d5dd83434a5ad42229f0091d8c34f97d9e8f4b09d8c977
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzCBg/QoCuTeWdv:lV2BZVPlFlnxClFvLLcA+sPDzAyHeWdv

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 15 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\DAoC + trainer.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File created	C:\Windows\win32dc\Half-Life 2_codes.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File created	C:\Windows\win32dc\BattleField 1942 serial.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File created	C:\Windows\win32dc\UT2004 patch.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File opened for modification	C:\Windows\win32dc\UT2004 patch.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2_codes.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File created	C:\Windows\win32dc\Sims 2_cdfix.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 serial.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File created	C:\Windows\win32dc\Half-Life 2 + hack.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4 + serial.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File created	C:\Windows\win32dc\DAoC + trainer.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File created	C:\Windows\win32dc\Half-Life 2(hack).exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File created	C:\Windows\win32dc\Silent Hill 4_serial.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File created	C:\Windows\win32dc\Counter-Strike_cdfix.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
File created	C:\Windows\win32dc\Silent Hill 4 + serial.exe	8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe

C:\Users\Admin\AppData\Local\Temp\8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe
"C:\Users\Admin\AppData\Local\Temp\8e84c8c065e22348e343a859e9f59a1a27f457769f0e291e5f5d9c04424f322e.exe"
1⤵
- Drops file in Windows directory
PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2028-54-0x0000000076651000-0x0000000076653000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads