06361aaa349839a3ba17de32f86e1219ef89815bfce5c45c005bc32657dd8d0b

Analysis

max time kernel
30s
max time network
35s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
23-04-2023 11:36

Target

UltimatePSN Checker v1.2 Updated/Data/resource/playstation.exe
Size

12.9MB
MD5

199291e246aacb45dbad7bfe296066fa
SHA1

1b8727331c02190d860e26f4a74156e5d1196012
SHA256

b78cfa136bc15eb5cd403a4751202b56035d360438481147d87df90f7e33f65c
SHA512

75f37558ae706e07b73b1e4c9af73068697141107a6adcd84c55500c20cce3fb6ca2be74ce58c5ce4886c58fd9d79b8fab7a18756ee7bdece250a43dfc42939f
SSDEEP

196608:2uOuB3+/GmduFeQUKuQYIWitAlAm04lAg7RKKcaXePZxyvQfE60iKI8xOUfX:2aB3+/cTNuQYIWfRFKz4uwxxn

Score

7^/10

agilenet

Loads dropped DLL 1 IoCs

Processes:

playstation.exe

pid process

3400 playstation.exe

pid	process
3400	playstation.exe

Obfuscated with Agile.Net obfuscator 3 IoCs

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

Processes:

resource	yara_rule
behavioral1/memory/3400-133-0x0000000000400000-0x0000000000BA2000-memory.dmp	agile_net
behavioral1/memory/3400-134-0x0000000000400000-0x0000000000B04000-memory.dmp	agile_net
behavioral1/memory/3400-150-0x0000000000400000-0x0000000000B04000-memory.dmp	agile_net

C:\Users\Admin\AppData\Local\Temp\UltimatePSN Checker v1.2 Updated\Data\resource\playstation.exe
"C:\Users\Admin\AppData\Local\Temp\UltimatePSN Checker v1.2 Updated\Data\resource\playstation.exe"
1⤵
- Loads dropped DLL
PID:3400

C:\Users\Admin\AppData\Local\Temp\evbD3C1.tmp
Filesize
1KB

MD5
8bbe459df890d9f2076368df528747bf

SHA1
60f58c76f94ae98f219f89013adbf4c97cdd7989

SHA256
6bdbb54f8a0b9e30a3e9fe691980e1445b12d0dd7da0681967f37d11f06bbd70

SHA512
b3820ea4d6c08c4c2a4a0226660a2e7945fadf0ee974239c9ffbf29cbbeccf3f85cf4e484e9673945fbb032ea19c54191933a6cc8603a6418a440af7f9e12520

Download Submit
memory/3400-133-0x0000000000400000-0x0000000000BA2000-memory.dmp

Filesize
7.6MB

Download
memory/3400-135-0x00007FF783270000-0x00007FF783280000-memory.dmp

Filesize
64KB

Download
memory/3400-134-0x0000000000400000-0x0000000000B04000-memory.dmp

Filesize
7.0MB

Download
memory/3400-138-0x0000000180000000-0x00000001802F2000-memory.dmp

Filesize
2.9MB

Download
memory/3400-142-0x00007FFFE1E70000-0x00007FFFE1FBE000-memory.dmp

Filesize
1.3MB

Download
memory/3400-147-0x0000000180000000-0x00000001802F2000-memory.dmp

Filesize
2.9MB

Download
memory/3400-150-0x0000000000400000-0x0000000000B04000-memory.dmp

Filesize
7.0MB

Download
memory/3400-151-0x0000000180000000-0x00000001802F2000-memory.dmp

Filesize
2.9MB

Download