Analysis

  • max time kernel
    126s
  • max time network
    37s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    03/04/2023, 00:55

General

  • Target

    GTA San Andreas 2.8.exe

  • Size

    531.8MB

  • MD5

    16c4fb2f06d529ae377847308d54ce36

  • SHA1

    1587f2ea85e2080a33c76655b925f38004fe35a7

  • SHA256

    409b92e1f6f86434d0d5be8ee7a00ed990d232a82a1e7005c2cc7722ca59c756

  • SHA512

    639acf967dfae5a93718c3fd3c81f9b5cd7cfbd7c5a121913b7940e42ecf004e894d2facfd0390e81fcf34d92b590e10d23e4600499cf061ce9d9d5325d14457

  • SSDEEP

    12582912:8WgUejtCF3+5tqrdgggtRRo7YOxV2R6kqOiG6EdCEHV2K:8vRtNsgfN8pHu0YhYY

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\GTA San Andreas 2.8.exe
    "C:\Users\Admin\AppData\Local\Temp\GTA San Andreas 2.8.exe"
    1⤵
      PID:1100

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\audio\streams\AMBIENCE

      Filesize

      44.4MB

      MD5

      d21f1684709d4c1202d5b4faf1407343

      SHA1

      11a86b7630812de7d68edd70bd2a0380dc4e83ec

      SHA256

      c191a8b328f3ac05bc295d39f1545b9c9a0393d99c0d204564f74724c43c7552

      SHA512

      2fb4be006ce52e431eb8e5f7253afa5bfedf018d66fac538b11ede3031b81833412b89b86929e3c1b20391a73879fa33e30b5107e3065fc69a466e8068b78b71

    • C:\Users\Admin\AppData\Local\Temp\data\Decision\m_weak.ped

      Filesize

      2KB

      MD5

      cf979d9712f478d0deb92fbb11c6ff2e

      SHA1

      b8023f8c1a39705db456a79dd917b745ed46dcec

      SHA256

      26fc955b2ff4f0fbc83ba75ddbd14b5ec347775ce2088e7066a389ea2e409d41

      SHA512

      85f73cc169b6eccad41126e48297e63a82b859efe74e330814d5317badb117fe2ccc3f4ca8a3016d70a738bc41c571ee0972fa8d72c3a3cf76507051ae259016

    • C:\Users\Admin\AppData\Local\Temp\data\Icons\saicon3.ICN

      Filesize

      64KB

      MD5

      ffcc3a0d32517475bc83f08331169ada

      SHA1

      e6627a0eef7f631bb03ad79b977a2e9fdc137933

      SHA256

      9b94c7f077ead920a87071ea51822b4c3c43c90ba46ea8bfe3647bed909661e5

      SHA512

      423e25ee0bf6a6e5aeb47447700afbebd41d771a42fd256a3755ce5c34ae493180d5d0ee4424cc552c6bbed1f0bbea410dcbbb667d2bb700dab6e7b831ff9609

    • C:\Users\Admin\AppData\Local\Temp\models\grass\grass1_3.dff

      Filesize

      1KB

      MD5

      84e3cdac0050a7ea9a87395728b99ac3

      SHA1

      9efc70003517fb180d4341125c382f826598353b

      SHA256

      ae0d950738f9abb5d327c413a62a76479a1d686b090d7ba84e51542cc98e264c

      SHA512

      413d5aa56330adff1576350c9b2fffd6fe35823b31f71e0b65f1ace36430ec66d3b60424834e95d9b7b40078e53216e9e2af693536004351fe6ae6ce3abe4d53

    • memory/1100-54-0x0000000000400000-0x0000000000433000-memory.dmp

      Filesize

      204KB

    • memory/1100-895-0x0000000000400000-0x0000000000433000-memory.dmp

      Filesize

      204KB