Analysis
-
max time kernel
154s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 19:02
Static task
static1
Behavioral task
behavioral1
Sample
d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe
Resource
win10v2004-20220812-en
General
-
Target
d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe
-
Size
90KB
-
MD5
08031165c7a61e15a42c3c4706f17278
-
SHA1
a3c8d72f8af2178bbea65bb6a568a2bbe9292b26
-
SHA256
d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e
-
SHA512
b46975bb92ce26d17f8bfd086d39c1058267e8b8ab594e5ed6be702d49cdcc4c65cbf0a74f9260b401cf75c2bc62d6d1872836cce0e5c68116aa99f42b508724
-
SSDEEP
1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDz9ChlU5UxuYgKH:lV2BZVPlFlnxClFvLLcA+sPDz9klUil
Malware Config
Signatures
-
Drops file in Windows directory 17 IoCs
description ioc Process File opened for modification C:\Windows\win32dc\Silent Hill 4 + trainer.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File created C:\Windows\win32dc\BattleField 1942 + serial.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File opened for modification C:\Windows\win32dc\BattleField 1942 + serial.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File created C:\Windows\win32dc\Doom 3 + serial.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File opened for modification C:\Windows\win32dc\FlatOut(trainer).exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File created C:\Windows\win32dc\Half-Life 2 hack.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File created C:\Windows\win32dc\Silent Hill 4 + trainer.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File created C:\Windows\win32dc\Sims 2 hack.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File created C:\Windows\win32dc\Doom 3 + patch.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File created C:\Windows\win32dc\Sims 2 + crack.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File opened for modification C:\Windows\win32dc\Sims 2 + crack.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File created C:\Windows\win32dc\FlatOut(trainer).exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File created C:\Windows\win32dc\FlatOut + cheat.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File created C:\Windows\win32dc\BattleField 1942(crack).exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File opened for modification C:\Windows\win32dc\Doom 3 + serial.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File opened for modification C:\Windows\win32dc\Sims 2 hack.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe File opened for modification C:\Windows\win32dc\Half-Life 2 hack.exe d0ee8ec0d0ae81c6261d2aadd1a21fa77c9f50941465efa62c1b6a755f59887e.exe