Analysis

  • max time kernel
    142s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230621-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/07/2023, 15:35

General

  • Target

    SecuriteInfo.com.W32.GameHack.E.gen.Eldorado.30865.26139.exe

  • Size

    1.1MB

  • MD5

    5f85aeb1371cca2032490062f489aa4e

  • SHA1

    79cedcfdc27dd5be31144e6e62931852faddb36d

  • SHA256

    9f38d413d3d6f29a3663d5addc20eeb44a11b6bcbbca75c4097a5bb124cbf004

  • SHA512

    dd27ed75b748c0531b159fd93ed84fb5c9acd1126afe687c5ef39d03d6aa5dddaffa3b8764ea2eba4df7e39215c98d83c57612bfe2455135a7e376b8508d6990

  • SSDEEP

    24576:eaQ1Umzj5MC/wQG4aXc4wKDC47yFO/qi/NXNfGCjSLmwsNPd3Rg:2u9DvyFO/jNd+CjS7sNlK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.GameHack.E.gen.Eldorado.30865.26139.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.GameHack.E.gen.Eldorado.30865.26139.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:4948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4948-133-0x0000000000400000-0x0000000000524000-memory.dmp

    Filesize

    1.1MB

  • memory/4948-136-0x0000000000400000-0x0000000000524000-memory.dmp

    Filesize

    1.1MB