Analysis

  • max time kernel
    136s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2023, 01:32

General

  • Target

    Monster_Black_Market_V2.0.16.0_w_DLC_w_Uncen.rar

  • Size

    284.2MB

  • MD5

    6265b26f57bc613b15f8a1f6bfa3c7ca

  • SHA1

    46d2b1210e9bc4d1b2c984811e18496d43eec602

  • SHA256

    6ded378bf47dbf5e769640206732495d6470f4ec45ac1497bbb338913889ff5b

  • SHA512

    b4f3806eb1827c0836943074ab89830c2742accf412869b4c8caf5236d571e78495feff0478c31cce082298d9a44df3842fbbba3de031f354690ecf3efcb8bad

  • SSDEEP

    6291456:iWU9N3qqOlY05+aw8bTSbFWVChf4HV8M3u/jdU8odL7F:j1+ZYy4VAfWV986dL7F

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 1 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Monster_Black_Market_V2.0.16.0_w_DLC_w_Uncen.rar
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2420
    • C:\Windows\system32\rundll32.exe
      "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\Monster_Black_Market_V2.0.16.0_w_DLC_w_Uncen.rar
      2⤵
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:2740
      • C:\Program Files\VideoLAN\VLC\vlc.exe
        "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Monster_Black_Market_V2.0.16.0_w_DLC_w_Uncen.rar"
        3⤵
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        PID:2760

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2760-30-0x000007FEFA8A0000-0x000007FEFA8D4000-memory.dmp

    Filesize

    208KB

  • memory/2760-29-0x000000013FCA0000-0x000000013FD98000-memory.dmp

    Filesize

    992KB

  • memory/2760-38-0x000007FEF71E0000-0x000007FEF71F1000-memory.dmp

    Filesize

    68KB

  • memory/2760-37-0x000007FEF7200000-0x000007FEF721D000-memory.dmp

    Filesize

    116KB

  • memory/2760-36-0x000007FEF7220000-0x000007FEF7231000-memory.dmp

    Filesize

    68KB

  • memory/2760-35-0x000007FEF73E0000-0x000007FEF73F7000-memory.dmp

    Filesize

    92KB

  • memory/2760-34-0x000007FEFA4B0000-0x000007FEFA4C1000-memory.dmp

    Filesize

    68KB

  • memory/2760-39-0x000007FEF4850000-0x000007FEF58FB000-memory.dmp

    Filesize

    16.7MB

  • memory/2760-33-0x000007FEFA4D0000-0x000007FEFA4E7000-memory.dmp

    Filesize

    92KB

  • memory/2760-32-0x000007FEFB3D0000-0x000007FEFB3E8000-memory.dmp

    Filesize

    96KB

  • memory/2760-31-0x000007FEF5900000-0x000007FEF5BB4000-memory.dmp

    Filesize

    2.7MB

  • memory/2760-41-0x000007FEF71A0000-0x000007FEF71DF000-memory.dmp

    Filesize

    252KB

  • memory/2760-42-0x000007FEF7170000-0x000007FEF7191000-memory.dmp

    Filesize

    132KB

  • memory/2760-43-0x000007FEF7150000-0x000007FEF7168000-memory.dmp

    Filesize

    96KB

  • memory/2760-44-0x000007FEF6F60000-0x000007FEF6F71000-memory.dmp

    Filesize

    68KB

  • memory/2760-45-0x000007FEF6F40000-0x000007FEF6F51000-memory.dmp

    Filesize

    68KB

  • memory/2760-46-0x000007FEF6F20000-0x000007FEF6F31000-memory.dmp

    Filesize

    68KB

  • memory/2760-47-0x000007FEF6F00000-0x000007FEF6F1B000-memory.dmp

    Filesize

    108KB

  • memory/2760-48-0x000007FEF6EE0000-0x000007FEF6EF1000-memory.dmp

    Filesize

    68KB

  • memory/2760-49-0x000007FEF6610000-0x000007FEF6628000-memory.dmp

    Filesize

    96KB

  • memory/2760-40-0x000007FEF5D00000-0x000007FEF5F00000-memory.dmp

    Filesize

    2.0MB

  • memory/2760-50-0x000007FEF65E0000-0x000007FEF6610000-memory.dmp

    Filesize

    192KB

  • memory/2760-51-0x000007FEF5F70000-0x000007FEF5FD7000-memory.dmp

    Filesize

    412KB

  • memory/2760-52-0x000007FEF4710000-0x000007FEF477F000-memory.dmp

    Filesize

    444KB

  • memory/2760-53-0x000007FEF65C0000-0x000007FEF65D1000-memory.dmp

    Filesize

    68KB

  • memory/2760-54-0x000007FEF41A0000-0x000007FEF41F6000-memory.dmp

    Filesize

    344KB

  • memory/2760-55-0x000007FEF4030000-0x000007FEF4058000-memory.dmp

    Filesize

    160KB

  • memory/2760-56-0x000007FEF4000000-0x000007FEF4024000-memory.dmp

    Filesize

    144KB

  • memory/2760-57-0x000007FEF6180000-0x000007FEF6197000-memory.dmp

    Filesize

    92KB

  • memory/2760-58-0x000007FEF3DA0000-0x000007FEF3DC3000-memory.dmp

    Filesize

    140KB

  • memory/2760-59-0x000007FEF5F50000-0x000007FEF5F61000-memory.dmp

    Filesize

    68KB

  • memory/2760-60-0x000007FEF3830000-0x000007FEF3842000-memory.dmp

    Filesize

    72KB

  • memory/2760-61-0x000007FEF3800000-0x000007FEF3821000-memory.dmp

    Filesize

    132KB

  • memory/2760-62-0x000007FEF37E0000-0x000007FEF37F3000-memory.dmp

    Filesize

    76KB

  • memory/2760-63-0x000007FEF37C0000-0x000007FEF37D2000-memory.dmp

    Filesize

    72KB

  • memory/2760-64-0x000007FEF3680000-0x000007FEF37BB000-memory.dmp

    Filesize

    1.2MB

  • memory/2760-65-0x000007FEF3650000-0x000007FEF367C000-memory.dmp

    Filesize

    176KB

  • memory/2760-66-0x000007FEF3490000-0x000007FEF3642000-memory.dmp

    Filesize

    1.7MB

  • memory/2760-67-0x000007FEF3430000-0x000007FEF348C000-memory.dmp

    Filesize

    368KB

  • memory/2760-68-0x000007FEF3410000-0x000007FEF3421000-memory.dmp

    Filesize

    68KB

  • memory/2760-69-0x000007FEF3370000-0x000007FEF3407000-memory.dmp

    Filesize

    604KB

  • memory/2760-70-0x000007FEF3350000-0x000007FEF3362000-memory.dmp

    Filesize

    72KB

  • memory/2760-71-0x000007FEF3110000-0x000007FEF3341000-memory.dmp

    Filesize

    2.2MB

  • memory/2760-72-0x000007FEF2F10000-0x000007FEF3022000-memory.dmp

    Filesize

    1.1MB

  • memory/2760-73-0x000007FEF2ED0000-0x000007FEF2F05000-memory.dmp

    Filesize

    212KB

  • memory/2760-74-0x000007FEF2EA0000-0x000007FEF2EC5000-memory.dmp

    Filesize

    148KB

  • memory/2760-75-0x000007FEF2E80000-0x000007FEF2E91000-memory.dmp

    Filesize

    68KB

  • memory/2760-76-0x000007FEF2E10000-0x000007FEF2E71000-memory.dmp

    Filesize

    388KB

  • memory/2760-77-0x000007FEF2DF0000-0x000007FEF2E01000-memory.dmp

    Filesize

    68KB

  • memory/2760-78-0x000007FEF2DD0000-0x000007FEF2DE2000-memory.dmp

    Filesize

    72KB

  • memory/2760-79-0x000007FEF2DB0000-0x000007FEF2DC3000-memory.dmp

    Filesize

    76KB

  • memory/2760-80-0x000007FEF2D10000-0x000007FEF2DAF000-memory.dmp

    Filesize

    636KB

  • memory/2760-81-0x000007FEF2CF0000-0x000007FEF2D01000-memory.dmp

    Filesize

    68KB

  • memory/2760-82-0x000007FEF2BE0000-0x000007FEF2CE2000-memory.dmp

    Filesize

    1.0MB

  • memory/2760-83-0x000007FEF2BC0000-0x000007FEF2BD1000-memory.dmp

    Filesize

    68KB

  • memory/2760-84-0x000007FEF2BA0000-0x000007FEF2BB1000-memory.dmp

    Filesize

    68KB

  • memory/2760-85-0x000007FEF2B80000-0x000007FEF2B91000-memory.dmp

    Filesize

    68KB

  • memory/2760-86-0x000007FEF2B60000-0x000007FEF2B72000-memory.dmp

    Filesize

    72KB

  • memory/2760-87-0x000007FEF2B40000-0x000007FEF2B58000-memory.dmp

    Filesize

    96KB

  • memory/2760-88-0x000007FEF2B20000-0x000007FEF2B36000-memory.dmp

    Filesize

    88KB

  • memory/2760-89-0x000007FEF2AF0000-0x000007FEF2B19000-memory.dmp

    Filesize

    164KB

  • memory/2760-90-0x000007FEF2AD0000-0x000007FEF2AE2000-memory.dmp

    Filesize

    72KB

  • memory/2760-91-0x000007FEF2AB0000-0x000007FEF2AC1000-memory.dmp

    Filesize

    68KB

  • memory/2760-92-0x000007FEF2A90000-0x000007FEF2AA1000-memory.dmp

    Filesize

    68KB