536a4e17fe9dfa2d39398ccd6709933200229d2acad9956ac93fdd0b085784ee

Submit
Reports

Overview

overview

Static

static

Your.Only.....0.zip

windows7-x64

Your.Only....ar.zip

windows7-x64

Your.Only...._5.zip

windows7-x64

Your.Only....ku.zip

windows7-x64

Your.Only....oi.zip

windows7-x64

Your.Only....sd.zip

windows7-x64

Your.Only....sd.zip

windows7-x64

Your.Only....ne.zip

windows7-x64

Your.Only....hd.zip

windows7-x64

Your.Only....or.zip

windows7-x64

Your.Only.....2.zip

windows7-x64

Your.Only....od.zip

windows7-x64

Your.Only....hd.zip

windows7-x64

Your.Only....er.zip

windows7-x64

Your.Only....er.zip

windows7-x64

Your.Only.....3.zip

windows7-x64

Your.Only....64.dll

windows7-x64

Your.Only....64.dll

windows7-x64

Your.Only....me.txt

windows7-x64

Your.Only....ge.txt

windows7-x64

Your.Only....rt.txt

windows7-x64

Your.Only....fg.dll

windows7-x64

Your.Only....bfg.so

windows7-x64

Your.Only....40.dll

windows7-x64

Your.Only....up.exe

windows7-x64

Your.Only....up.exe

windows7-x64

Your.Only....st.exe

windows7-x64

Your.Only....64.exe

windows7-x64

Your.Only....86.exe

windows7-x64

Your.Only....64.exe

windows7-x64

Your.Only....86.exe

windows7-x64

Your.Only....st.msi

windows7-x64

Analysis

max time kernel
296s
max time network
320s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
15-10-2023 21:28

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Your.Only.Move.is.HUSTLE.v1.7.0.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral2

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/DiavoloChar.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral3

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Doubledown_5.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral4

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Goku.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Kuroi.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Lunaticahisgduiasd.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral7

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/MWjhagvsdjasd.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral8

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Machine.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral9

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Mikoasjkdhgauishd.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral10

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Senator.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral11

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/SoupModOptions_v1.2.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/StageWaterMod.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Vixenasjdhgasjhd.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/_IbuiBrawler.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/char_loader.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/custom_stage_loader-1.5.3.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_api64.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_api64.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_settings/settings/account_name.txt

Resource

win7-20230831-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral20

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_settings/settings/language.txt

Resource

win7-20230831-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral21

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_settings/settings/listen_port.txt

Resource

win7-20230831-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral22

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/tbfg.dll

Resource

win7-20230831-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral23

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/tbfg.so

Resource

win7-20230831-en

windows7-x64

5 signatures

300 seconds

Behavioral task

behavioral24

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/vcruntime140.dll

Resource

win7-20230831-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral25

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/dotNetFx40_Full_setup.exe

Resource

win7-20230831-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral26

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/dxwebsetup.exe

Resource

win7-20230831-en

persistence

windows7-x64

8 signatures

300 seconds

Behavioral task

behavioral27

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/oalinst.exe

Resource

win7-20230831-en

discovery

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral28

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/vcredist_2015-2019_x64.exe

Resource

win7-20230831-en

discovery

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral29

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/vcredist_2015-2019_x86.exe

Resource

win7-20230831-en

discovery

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral30

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/vcredist_x64.exe

Resource

win7-20230831-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral31

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/vcredist_x86.exe

Resource

win7-20230831-en

windows7-x64

5 signatures

300 seconds

Behavioral task

behavioral32

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/xnafx40_redist.msi

Resource

win7-20230831-en

windows7-x64

5 signatures

300 seconds

Report Analysis Logs

General

Target

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/tbfg.dll
Size

1.0MB
MD5

b7a07348e173ee92458c740dd4387c9b
SHA1

280895870c062e2d5c1beb852883297f9923ba7c
SHA256

0184a42e8390dcc3af4f19a5781b65deca5ed06082acd4a2b2dd67121b10514f
SHA512

e4dd403156410c651ee48ce6fbe3bc4bff37fd25cdf334500786ef875d38c8d8b009f6631c5222195986cd56e85944faae3bd7ac25a1ce21934fd561f8827665
SSDEEP

12288:Tn0OQjNONMIc7mjFlq6Xlbv96zBwpXEW1zsQP8jajsQ:1FKIMeFkelbv96zBTW1zsQP80s

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1452 wrote to memory of 2244	1452	rundll32.exe	28
PID 1452 wrote to memory of 2244	1452	rundll32.exe	28
PID 1452 wrote to memory of 2244	1452	rundll32.exe	28

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Your.Only.Move.is.HUSTLE.v1.7.0\Your.Only.Move.is.HUSTLE.v1.7.0\tbfg.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1452
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1452 -s 108
  2⤵
  PID:2244

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads