Analysis
-
max time kernel
185s -
max time network
196s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
14/10/2023, 00:43
General
-
Target
File-BeamNG.drive-v0.23.5.2-Gnarly-Repacks_268171.exe
-
Size
4.0MB
-
MD5
40e45a1b5d1493e4adbddc41248eeb0d
-
SHA1
9ca3c821a94bf934a7dfa62c101b673a014b1642
-
SHA256
dc287b1f38dfd32bdd479048022dba205674c378882867499ae216cbd251f6f5
-
SHA512
b9fa071713c40a3cec1c679ffba7ae3409cee46730ddb7240c11971cb5435782204bdc9b0c4eb4e2249f15130470368df043fd7a6e5d50d17abf87d386487759
-
SSDEEP
49152:FmfdOTMpa40Ab7JwSS9EFClzMucUJTYb6lHI5duHS3nZ561dFT/o0PmuYsdcg:qdwka4j0p9cei6sdES3XAdFGuYY1
Score
5/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\File-BeamNG.drive-v0.23.5.2-Gnarly-Repacks_268171.exe"C:\Users\Admin\AppData\Local\Temp\File-BeamNG.drive-v0.23.5.2-Gnarly-Repacks_268171.exe"1⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\File-BeamNG.drive-v0.23.5.2-Gnarly-Repacks_268171.exe"C:\Users\Admin\AppData\Local\Temp\File-BeamNG.drive-v0.23.5.2-Gnarly-Repacks_268171.exe" --pt2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4KB
-
Filesize
4.1MB
-
Filesize
4KB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4KB
-
Filesize
4.1MB