Analysis
-
max time kernel
68s -
max time network
81s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
19-04-2023 06:56
General
-
Target
FNIA-2-Full-Game.exe
-
Size
160.7MB
-
MD5
888938b80a6738df3ec9fdfe13423f86
-
SHA1
bd78e4f6694fce1990bbe78a649f8297f8a2ce88
-
SHA256
44e0eff0ea6246ec0c2ec8df59c0cc984120d750ca1d20b7c8758b0a07abc9b9
-
SHA512
e49127d940816c9f08348c1a6dd484b599c5b0e627e31444e941f40d1a6aed6dd7e435bc7e076fd518796360db51713cbc42d61e71cea272bc50628b8ba052a1
-
SSDEEP
3145728:o2P8rNXSgJZJ/dlUC4KfVzV+nW89EQLRq214bos4G7SZeVKlljVBPBtQEJd7:fP8pigHJlWufVzgNEQ9qb0sOZeVspB88
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 64 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FNIA-2-Full-Game.exe"C:\Users\Admin\AppData\Local\Temp\FNIA-2-Full-Game.exe"1⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x41c 0x4b01⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
484KB
MD574529599302a2e09c30b1e119a0709f2
SHA15990f60194ecafaf43340e44657d224f8d5682eb
SHA256edfc5f86be36c2c509e4ad6ba3742bb5b2429a56de805a99771e24fec62b076a
SHA51225d1c2bc15f5d20f3d69a2c20727e4e2cbb7086aa18ec535eea2a5766302b031c12b9139467b717537300e1497102b387dcc3f53ca5ff11f5301de672efe4b07
-
Filesize
284KB
-
Filesize
236KB
-
Filesize
1000KB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
100KB
-
Filesize
4.2MB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
3.4MB
-
Filesize
4KB
-
Filesize
3.4MB
-
Filesize
236KB
-
Filesize
4.2MB
-
Filesize
100KB
-
Filesize
284KB
-
Filesize
1000KB