Analysis
-
max time kernel
144s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 09:56
Static task
static1
Behavioral task
behavioral1
Sample
7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe
Resource
win10v2004-20220812-en
General
-
Target
7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe
-
Size
77KB
-
MD5
19090dad6e9c30af64f2ff78338377c0
-
SHA1
8c310b872604a260bf00a9e06e56457b9bb07ba8
-
SHA256
7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5
-
SHA512
f2897deca8c8a030f0832833da07f6687874f1e6eca6520d2b770730743014321cfbf02babe211cbd53513ce30c0129366127a577cb620891ca0b1e2d2c6db3f
-
SSDEEP
1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDz0TGEF50:lV2BZVPlFlnxClFvLLcA+sPDz0TGEFK
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\CTjoqomaVWuVkoR.com 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe -
Drops file in Windows directory 17 IoCs
description ioc Process File opened for modification C:\Windows\win32dc\Silent Hill 4(patch).exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File created C:\Windows\win32dc\BattleField 1942(cheat).exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File created C:\Windows\win32dc\UT2004 patch.exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File created C:\Windows\win32dc\UT2004 + cdfix.exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File created C:\Windows\win32dc\Doom 3_serial.exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File opened for modification C:\Windows\win32dc\UT2004(crack).exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File opened for modification C:\Windows\win32dc\Half-Life 2(trainer).exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File created C:\Windows\win32dc\FlatOut(hack).exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File created C:\Windows\win32dc\Counter-Strike cdfix.exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File opened for modification C:\Windows\win32dc\Counter-Strike cdfix.exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File created C:\Windows\win32dc\FlatOut serial.exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File created C:\Windows\win32dc\Half-Life 2(trainer).exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File opened for modification C:\Windows\win32dc\FlatOut(hack).exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File created C:\Windows\win32dc\Silent Hill 4(patch).exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File opened for modification C:\Windows\win32dc\BattleField 1942(cheat).exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File opened for modification C:\Windows\win32dc\Doom 3_serial.exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe File created C:\Windows\win32dc\UT2004(crack).exe 7e71c62066b855e93c57142bf0a636db43a18a53ccb3a4f415d8d466455a3ef5.exe