Analysis
-
max time kernel
151s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
20-04-2023 10:32
General
-
Target
pokemmo-installer-windows.exe
-
Size
94.4MB
-
MD5
8b22ee834271e2e713ad97cffd6a7396
-
SHA1
a5d4744f8928b79e224f24b5821cd9d630095f19
-
SHA256
13ae857cd1ceb2e412189d6038b1a8f55e633a570b226b5c1eab4bae0aa26217
-
SHA512
185d1f728130e3158c0e37aa55fd712de1fc9526cfe96d80da1c457223a48ce9be2eca82b1e95cc7827f161ae12789f9b48bfdf40ca997bcd13d5c82cfe455cb
-
SSDEEP
1572864:Dt/pCacB8iiHJPlBmV+g+o4bUu/T/Q4sXIkih0Ga+/h2ju4FQK2Japal7r:NpCFy7q06VuTRMU0p+/4ju4YJaMlv
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\pokemmo-installer-windows.exe"C:\Users\Admin\AppData\Local\Temp\pokemmo-installer-windows.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-852I2.tmp\pokemmo-installer-windows.tmp"C:\Users\Admin\AppData\Local\Temp\is-852I2.tmp\pokemmo-installer-windows.tmp" /SL5="$70126,98177700,721408,C:\Users\Admin\AppData\Local\Temp\pokemmo-installer-windows.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.4MB
MD584db4b4205f705da71471dc6ecc061f5
SHA1b90bac8c13a1553d58feef95a2c41c64118b29cf
SHA256647983ebde53e0501ff1af8ef6190dfeea5ccc64caf7dce808f1e3d98fb66a3c
SHA512c5803b63d33bb409433b496b83ca2a7359b4b1835815386206283b3af5c54d7d1cb9e80244a888638c7703c4bf54e1b2c11be6836f20b9fea157ab92bfbf365a
-
Filesize
2.4MB
MD584db4b4205f705da71471dc6ecc061f5
SHA1b90bac8c13a1553d58feef95a2c41c64118b29cf
SHA256647983ebde53e0501ff1af8ef6190dfeea5ccc64caf7dce808f1e3d98fb66a3c
SHA512c5803b63d33bb409433b496b83ca2a7359b4b1835815386206283b3af5c54d7d1cb9e80244a888638c7703c4bf54e1b2c11be6836f20b9fea157ab92bfbf365a
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.5MB
-
Filesize
760KB
-
Filesize
760KB