67250d205075651603bd50937836b21563274b5d8a5fc0394ffc379d5cb45bfd

Analysis

max time kernel
151s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
03/11/2023, 13:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
Size

168KB
MD5

130fef62a4a0094e21f68b6927e9d8e0
SHA1

a1ddb5ff2ce4a38039bdb3fcd6c3b3b13d4c0381
SHA256

67250d205075651603bd50937836b21563274b5d8a5fc0394ffc379d5cb45bfd
SHA512

3722b3b6bf233641a4b150555470d5d85f4e3184238d34fe039a3422597ea9820abe94701d8578318cd8873cc5c396201bb5c96492838a4d7fad420b324ae8bf
SSDEEP

3072:vJfuq8IzyLHIDhAAkRsv3s+qUY+OYvQd2r+OhlWx2Bx6x9t0U:puq1yyhnkepZZr+OhlWx2BxW9tz

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 19 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\UT2004_crack.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\Sims 2 patch.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\DAoC(cheat).exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\Doom 3 + trainer.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\UT2004 patch.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\Counter-Strike + cheat.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\UT2004_crack.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 codes.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\Quake3_nocd.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\Quake3_nocd.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\UT2004 patch.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\Sims 2 + cheat.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\FlatOut_fix.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\FlatOut_fix.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\BattleField 1942 codes.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike + cheat.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\Doom 3 + trainer.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File created	C:\Windows\win32dc\Sims 2 + cheat.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
File opened for modification	C:\Windows\win32dc\Sims 2 patch.exe	NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.130fef62a4a0094e21f68b6927e9d8e0.exe"
1⤵
- Drops file in Windows directory
PID:3356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\Doom 3 + trainer.exe

Filesize
171KB

MD5
7db56b4dac3682262fee303f465c7ff6

SHA1
7b98c63ffa0fb712497998479c4256c6b5bec2df

SHA256
ac5fc87f1e4a3612e21810812c44df9f2433654d2ac8210b8da239b676627c47

SHA512
5169696180bacb7ed120bdbd392b577fbf7c45b3fa3fa6fff66f871c0bf92d54fa9dd486e53976ce2b71ee105ecfeb31479b8e13d9f0d8df68f55819ef583267

Download Submit
memory/3356-18-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/3356-19-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/3356-20-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/3356-21-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/3356-22-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/3356-23-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/3356-24-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/3356-25-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/3356-26-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/3356-27-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/3356-28-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/3356-29-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/3356-30-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/3356-31-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads