42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf

Analysis

max time kernel
131s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 00:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe
Size

2.5MB
MD5

4cb2688212fb0183377cc72f170156e8
SHA1

b61cbe85c38e07e314004655381b750d4d9e6edd
SHA256

42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf
SHA512

972d9602065db90a065afa48dac5caa0258685b78c44fffe7978f8619eae38eaa35f27d9acb46c0648537a57caae69dd540b55cbd0340aa50b05d0d166455913
SSDEEP

49152:tVwH0vU2AU/iQ2F5dUyGwIwiMdmXNnPMjOV/jSx9IOPdxUBQq209XutfImGtU9kA:tVwUNSN3IwhmdmA/jSnIOPdxUB52KXuD

Score

4^/10

Malware Config

Signatures

Drops file in Program Files directory 11 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\SubwaySurfers	42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe
File created	C:\Program Files (x86)\SubwaySurfers\Interop.IWshRuntimeLibrary.dll	42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe
File opened for modification	C:\Program Files (x86)\SubwaySurfers\Interop.IWshRuntimeLibrary.dll	42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe
File opened for modification	C:\Program Files (x86)\SubwaySurfers\runme.exe	42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe
File opened for modification	C:\Program Files (x86)\SubwaySurfers\mac.exe	42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe
File created	C:\Program Files (x86)\SubwaySurfers\runme.exe	42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe
File created	C:\Program Files (x86)\SubwaySurfers\SubwaySurfers.exe	42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe
File created	C:\Program Files (x86)\SubwaySurfers\__tmp_rar_sfx_access_check_240552265	42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe
File created	C:\Program Files (x86)\SubwaySurfers\4konya.exe	42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe
File opened for modification	C:\Program Files (x86)\SubwaySurfers\4konya.exe	42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe
File created	C:\Program Files (x86)\SubwaySurfers\mac.exe	42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe

C:\Users\Admin\AppData\Local\Temp\42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe
"C:\Users\Admin\AppData\Local\Temp\42d9dc1675635c282b0af4496594453092e936a1a6e9337e2de113ecb2b1e0bf.exe"
1⤵
- Drops file in Program Files directory
PID:2548

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads