Analysis
-
max time kernel
117s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
12/10/2023, 02:58
Static task
static1
Behavioral task
behavioral1
Sample
Super Mario Bros Star Scramble 2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Super Mario Bros Star Scramble 2.exe
Resource
win10v2004-20230915-en
General
-
Target
Super Mario Bros Star Scramble 2.exe
-
Size
16.3MB
-
MD5
5af5377fa2e420c65363beffb74fdf52
-
SHA1
af459ded9cd909ad4bbef02da0118faf18baf397
-
SHA256
63045e73eea39d1c741d8a6e4c6d8e6eaa96bc2d724e8f01595f49587f225091
-
SHA512
3f0e68ecc0f3c0ee8c6e426f782cb2830885490126184169481581681ae3b8b7d0e23b0453b0666868db50de29eeaa81581156d2c4e7d553be1747d6e317dce5
-
SSDEEP
393216:2kMdNR9O0tw5p6kDlG6Kk//9DFiLKZa7TCRe0IAEqlF:2xdv9Ozj6kDlf//+KZBwHAd
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 Super Mario Bros Star Scramble 2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz Super Mario Bros Star Scramble 2.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2644 Super Mario Bros Star Scramble 2.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2644 Super Mario Bros Star Scramble 2.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461