85f9e216a24dd777f8e4b7db008128d402355eb93a316fa6ba6c6d8392720a19

Analysis

max time kernel
3s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
22-04-2023 15:40

Target

MegaHack v5.4 SETUP.exe
Size

14.6MB
MD5

21f8588ba383393390d76ca642d73183
SHA1

292d500d0ab46c701b33a93284e99a5144078be6
SHA256

85f9e216a24dd777f8e4b7db008128d402355eb93a316fa6ba6c6d8392720a19
SHA512

6426425fcf4ca0ae1ebfbc5b1b91f86a4b9a1bb7a9dc1f648879d3f810c1e5a36d0f3b56effe1f204d0e1847eb93b0ca00fd7c5c2899a8097268f9eddfcbcbd0
SSDEEP

393216:mEGDkj4i79yFTB3HWNmHrjAbh6pBKzd25iFsmF5cISZH:mnA/EFTB3RHyzQxmF5C

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
840	MegaHack v5.4 SETUP.tmp

Loads dropped DLL 1 IoCs

pid	Process
1984	MegaHack v5.4 SETUP.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1984 wrote to memory of 840	1984	MegaHack v5.4 SETUP.exe	27
PID 1984 wrote to memory of 840	1984	MegaHack v5.4 SETUP.exe	27
PID 1984 wrote to memory of 840	1984	MegaHack v5.4 SETUP.exe	27
PID 1984 wrote to memory of 840	1984	MegaHack v5.4 SETUP.exe	27
PID 1984 wrote to memory of 840	1984	MegaHack v5.4 SETUP.exe	27
PID 1984 wrote to memory of 840	1984	MegaHack v5.4 SETUP.exe	27
PID 1984 wrote to memory of 840	1984	MegaHack v5.4 SETUP.exe	27

C:\Users\Admin\AppData\Local\Temp\MegaHack v5.4 SETUP.exe
"C:\Users\Admin\AppData\Local\Temp\MegaHack v5.4 SETUP.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1984
- C:\Users\Admin\AppData\Local\Temp\is-M6D4P.tmp\MegaHack v5.4 SETUP.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-M6D4P.tmp\MegaHack v5.4 SETUP.tmp" /SL5="$70120,15016215,57856,C:\Users\Admin\AppData\Local\Temp\MegaHack v5.4 SETUP.exe"
  2⤵
  - Executes dropped EXE
  PID:840

C:\Users\Admin\AppData\Local\Temp\is-M6D4P.tmp\MegaHack v5.4 SETUP.tmp

Filesize
697KB

MD5
832dab307e54aa08f4b6cdd9b9720361

SHA1
ebd007fb7482040ecf34339e4bf917209c1018df

SHA256
cc783a04ccbca4edd06564f8ec88fe5a15f1e3bb26cec7de5e090313520d98f3

SHA512
358d43522fd460eb1511708e4df22ea454a95e5bc3c4841931027b5fa3fb1dda05d496d8ad0a8b9279b99e6be74220fe243db8f08ef49845e9fb35c350ef4b49

Download Submit
\Users\Admin\AppData\Local\Temp\is-M6D4P.tmp\MegaHack v5.4 SETUP.tmp

Filesize
697KB

MD5
832dab307e54aa08f4b6cdd9b9720361

SHA1
ebd007fb7482040ecf34339e4bf917209c1018df

SHA256
cc783a04ccbca4edd06564f8ec88fe5a15f1e3bb26cec7de5e090313520d98f3

SHA512
358d43522fd460eb1511708e4df22ea454a95e5bc3c4841931027b5fa3fb1dda05d496d8ad0a8b9279b99e6be74220fe243db8f08ef49845e9fb35c350ef4b49

Download Submit
memory/840-62-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1984-54-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download