0d7bc42c56b0f0ee4bbf6e2178db5adbf145295ba4e5dee7532e1c0858ea3fe3

Resubmissions

12/01/2023, 23:39

12/01/2023, 23:33

max time kernel
81s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
12/01/2023, 23:33

Target

Counter-Strike.exe
Size

265.2MB
MD5

37667601ee4b53183145118c5751330e
SHA1

f42d970dc4b239ebb34277f96dea5b0a941d6ca9
SHA256

0d7bc42c56b0f0ee4bbf6e2178db5adbf145295ba4e5dee7532e1c0858ea3fe3
SHA512

6c7bd24eac7d5e0474ecb5583f8d66c98b5bad91cd5c2a6b26d06142a5ce0404ab0314f095ccf9751f04db27337a42b21634265364524e55689c92ce46aecf48
SSDEEP

3145728:9fjTxdljCmzc15qJPPZOnJlMKbAhMslm88ayBurKCGk1NxRJg8jKxePjAxxHfOnp:d1D8qJ3EAhHmbFBXk1nXPuAjYeKt79O

Score

8^/10

Executes dropped EXE 1 IoCs

pid	Process
4768	Counter-Strike.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4868 wrote to memory of 4768	4868	Counter-Strike.exe	80
PID 4868 wrote to memory of 4768	4868	Counter-Strike.exe	80
PID 4868 wrote to memory of 4768	4868	Counter-Strike.exe	80

C:\Users\Admin\AppData\Local\Temp\Counter-Strike.exe
"C:\Users\Admin\AppData\Local\Temp\Counter-Strike.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4868
- C:\Users\Admin\AppData\Local\Temp\is-VBMVS.tmp\Counter-Strike.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-VBMVS.tmp\Counter-Strike.tmp" /SL5="$A01DE,277524654,60928,C:\Users\Admin\AppData\Local\Temp\Counter-Strike.exe"
  2⤵
  - Executes dropped EXE
  PID:4768

C:\Users\Admin\AppData\Local\Temp\is-VBMVS.tmp\Counter-Strike.tmp

Filesize
700KB

MD5
ccd2afcc8b78a187d60d2fd9e26e2fe1

SHA1
db2c8cff0e12ad35faffa8d181de31eb916e5315

SHA256
4c37ea9342587b6cc9a2c64018a518fe3d8b7018550b8726f3f4377cfa0a9671

SHA512
b567ea1a95586e757afe573658ff25fa19ba80977e36cb2c557afe254a9d1dd427005a3b98e01d87e63bbffa451ba618c6b951cbc0e47d68f476efaaf4f8e0b9

Download Submit
memory/4868-132-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/4868-136-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/4868-137-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download