67250d205075651603bd50937836b21563274b5d8a5fc0394ffc379d5cb45bfd

Analysis

max time kernel
164s
max time network
179s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
03-11-2023 13:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
Size

168KB
MD5

130fef62a4a0094e21f68b6927e9d8e0
SHA1

a1ddb5ff2ce4a38039bdb3fcd6c3b3b13d4c0381
SHA256

67250d205075651603bd50937836b21563274b5d8a5fc0394ffc379d5cb45bfd
SHA512

3722b3b6bf233641a4b150555470d5d85f4e3184238d34fe039a3422597ea9820abe94701d8578318cd8873cc5c396201bb5c96492838a4d7fad420b324ae8bf
SSDEEP

3072:vJfuq8IzyLHIDhAAkRsv3s+qUY+OYvQd2r+OhlWx2Bx6x9t0U:puq1yyhnkepZZr+OhlWx2BxW9tz

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 17 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\Counter-Strike(nocd).exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\DAoC serial.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\Silent Hill 4 patch.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\Counter-Strike_trainer.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4 + trainer.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\FlatOut_fix.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\Counter-Strike(nocd).exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\Silent Hill 4(serial).exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\UT2004_fix.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\Quake3_trainer.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4 patch.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\BattleField 1942 patch.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 patch.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\Silent Hill 4 + trainer.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4(serial).exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\FlatOut_fix.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\UT2004_fix.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe"
1⤵
- Drops file in Windows directory
PID:2528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\Silent Hill 4 patch.exe

Filesize
170KB

MD5
97874c0797074d19b9610acb489c22f4

SHA1
fcdffe76381ab3eff2e5ef71be53d9f1e77abe0d

SHA256
292a6a57892392b5a057d9dee648c044dbd04e9bee39732210fd8632033e456f

SHA512
f95593aabb29324f78a7b5e2b39bbad8eb135a470c88676fad74d11352007db20f8d1d7e70f65de8874a667de3119b37f6d4c9dea9c23e0fcbc54564dc636e95

Download Submit
memory/2528-17-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads