536a4e17fe9dfa2d39398ccd6709933200229d2acad9956ac93fdd0b085784ee

Submit
Reports

Overview

overview

Static

static

Your.Only.....0.zip

windows7-x64

Your.Only....ar.zip

windows7-x64

Your.Only...._5.zip

windows7-x64

Your.Only....ku.zip

windows7-x64

Your.Only....oi.zip

windows7-x64

Your.Only....sd.zip

windows7-x64

Your.Only....sd.zip

windows7-x64

Your.Only....ne.zip

windows7-x64

Your.Only....hd.zip

windows7-x64

Your.Only....or.zip

windows7-x64

Your.Only.....2.zip

windows7-x64

Your.Only....od.zip

windows7-x64

Your.Only....hd.zip

windows7-x64

Your.Only....er.zip

windows7-x64

Your.Only....er.zip

windows7-x64

Your.Only.....3.zip

windows7-x64

Your.Only....64.dll

windows7-x64

Your.Only....64.dll

windows7-x64

Your.Only....me.txt

windows7-x64

Your.Only....ge.txt

windows7-x64

Your.Only....rt.txt

windows7-x64

Your.Only....fg.dll

windows7-x64

Your.Only....bfg.so

windows7-x64

Your.Only....40.dll

windows7-x64

Your.Only....up.exe

windows7-x64

Your.Only....up.exe

windows7-x64

Your.Only....st.exe

windows7-x64

Your.Only....64.exe

windows7-x64

Your.Only....86.exe

windows7-x64

Your.Only....64.exe

windows7-x64

Your.Only....86.exe

windows7-x64

Your.Only....st.msi

windows7-x64

Analysis

max time kernel
284s
max time network
319s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
15-10-2023 21:28

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Your.Only.Move.is.HUSTLE.v1.7.0.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral2

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/DiavoloChar.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral3

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Doubledown_5.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral4

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Goku.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Kuroi.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Lunaticahisgduiasd.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral7

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/MWjhagvsdjasd.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral8

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Machine.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral9

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Mikoasjkdhgauishd.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral10

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Senator.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral11

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/SoupModOptions_v1.2.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/StageWaterMod.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Vixenasjdhgasjhd.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/_IbuiBrawler.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/char_loader.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/custom_stage_loader-1.5.3.zip

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_api64.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_api64.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_settings/settings/account_name.txt

Resource

win7-20230831-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral20

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_settings/settings/language.txt

Resource

win7-20230831-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral21

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_settings/settings/listen_port.txt

Resource

win7-20230831-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral22

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/tbfg.dll

Resource

win7-20230831-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral23

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/tbfg.so

Resource

win7-20230831-en

windows7-x64

5 signatures

300 seconds

Behavioral task

behavioral24

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/vcruntime140.dll

Resource

win7-20230831-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral25

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/dotNetFx40_Full_setup.exe

Resource

win7-20230831-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral26

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/dxwebsetup.exe

Resource

win7-20230831-en

persistence

windows7-x64

8 signatures

300 seconds

Behavioral task

behavioral27

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/oalinst.exe

Resource

win7-20230831-en

discovery

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral28

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/vcredist_2015-2019_x64.exe

Resource

win7-20230831-en

discovery

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral29

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/vcredist_2015-2019_x86.exe

Resource

win7-20230831-en

discovery

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral30

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/vcredist_x64.exe

Resource

win7-20230831-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral31

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/vcredist_x86.exe

Resource

win7-20230831-en

windows7-x64

5 signatures

300 seconds

Behavioral task

behavioral32

Sample

Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/xnafx40_redist.msi

Resource

win7-20230831-en

windows7-x64

5 signatures

300 seconds

Report Analysis Logs

General

Target

Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/vcruntime140.dll
Size

96KB
MD5

f12681a472b9dd04a812e16096514974
SHA1

6fd102eb3e0b0e6eef08118d71f28702d1a9067c
SHA256

d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
SHA512

7d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
SSDEEP

1536:BxhUQePlHhR46rXHHGI+mAAD4AeDuXMycecb8i10DWZz:Bvk4wHH+mZD4ADAecb8G1

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2612 wrote to memory of 2568	2612	rundll32.exe	29
PID 2612 wrote to memory of 2568	2612	rundll32.exe	29
PID 2612 wrote to memory of 2568	2612	rundll32.exe	29

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Your.Only.Move.is.HUSTLE.v1.7.0\Your.Only.Move.is.HUSTLE.v1.7.0\vcruntime140.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2612
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2612 -s 84
  2⤵
  PID:2568

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads