0ca0ca7763b472e60255ac6936ec4c964221e2cfed20ccfc780ccbe6949491e7

Analysis

max time kernel
150s
max time network
155s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
16/10/2023, 18:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

NEAS.371d23f77f9388db226dce96c462d6e0.exe
Size

227KB
MD5

371d23f77f9388db226dce96c462d6e0
SHA1

953a043ba43702953b899903e382b918cc8e20b2
SHA256

0ca0ca7763b472e60255ac6936ec4c964221e2cfed20ccfc780ccbe6949491e7
SHA512

a48922b29a48ab816eb32faf13566fa6f5283ef1aac2a31ea38272d3a4451062abe40062b2fd5314335fe4aa2aab4003100b298e5d3bb4cf1b4311c313528664
SSDEEP

6144:Ouq1yyfpenkeQ4owfU/bJHf1/Q5mXSjMJ:S1yoMkbnw8/9HN/tSjMJ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2364-0-0x0000000000400000-0x0000000000418000-memory.dmp	upx
behavioral1/files/0x0007000000015c11-5.dat	upx
behavioral1/memory/2364-18-0x0000000000400000-0x0000000000418000-memory.dmp	upx

Drops file in Windows directory 16 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\DAoC crack.exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File created	C:\Windows\win32dc\BattleField 1942(codes).exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File opened for modification	C:\Windows\win32dc\Quake3(cheat).exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File created	C:\Windows\win32dc\Sims 2(fix).exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File created	C:\Windows\win32dc\Sims 2 + fix.exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File created	C:\Windows\win32dc\DAoC crack.exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File created	C:\Windows\win32dc\Sims 2 + codes.exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File created	C:\Windows\win32dc\DAoC cheat.exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike(hack).exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File created	C:\Windows\win32dc\Quake3(cheat).exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File opened for modification	C:\Windows\win32dc\Sims 2 + codes.exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942(codes).exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File created	C:\Windows\win32dc\Sims 2 crack.exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File opened for modification	C:\Windows\win32dc\Sims 2 crack.exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File opened for modification	C:\Windows\win32dc\Sims 2(fix).exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe
File created	C:\Windows\win32dc\Counter-Strike(hack).exe	NEAS.371d23f77f9388db226dce96c462d6e0.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.371d23f77f9388db226dce96c462d6e0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.371d23f77f9388db226dce96c462d6e0.exe"
1⤵
- Drops file in Windows directory
PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\DAoC cheat.exe

Filesize
227KB

MD5
371d23f77f9388db226dce96c462d6e0

SHA1
953a043ba43702953b899903e382b918cc8e20b2

SHA256
0ca0ca7763b472e60255ac6936ec4c964221e2cfed20ccfc780ccbe6949491e7

SHA512
a48922b29a48ab816eb32faf13566fa6f5283ef1aac2a31ea38272d3a4451062abe40062b2fd5314335fe4aa2aab4003100b298e5d3bb4cf1b4311c313528664

Download Submit
memory/2364-0-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download
memory/2364-18-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads