Analysis
-
max time kernel
144s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 16:08
Static task
static1
Behavioral task
behavioral1
Sample
04f4dd2b939516b41e9a5e58db2a7289.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04f4dd2b939516b41e9a5e58db2a7289.exe
Resource
win10v2004-20231215-en
General
-
Target
04f4dd2b939516b41e9a5e58db2a7289.exe
-
Size
78KB
-
MD5
04f4dd2b939516b41e9a5e58db2a7289
-
SHA1
394591967c3b7ccd0c057641a00cbd4c5ae6e867
-
SHA256
3ec1b594a661073a258397eac2dd07f643936663fb3528c288ace7f6bffd1d9d
-
SHA512
b63e271a95bac820242692ba6aeddfa245875f4527252b5ecf67ec0f0184bb8e0273efb6db355cc3460158cca1b76745f87f490ddaf0591ec9da2e64d2489850
-
SSDEEP
1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzrTn/QR:lV2BZVPlFlnxClFvLLcA+sPDzPn4R
Malware Config
Signatures
-
Drops file in Windows directory 18 IoCs
description ioc Process File opened for modification C:\Windows\win32dc\Silent Hill 4(cdfix).exe 04f4dd2b939516b41e9a5e58db2a7289.exe File created C:\Windows\win32dc\FlatOut trainer.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File opened for modification C:\Windows\win32dc\Sims 2 + codes.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File opened for modification C:\Windows\win32dc\Sims 2 serial.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File created C:\Windows\win32dc\Sims 2_fix.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File opened for modification C:\Windows\win32dc\Half-Life 2 + fix.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File created C:\Windows\win32dc\UT2004_patch.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File created C:\Windows\win32dc\Sims 2 serial.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File created C:\Windows\win32dc\Silent Hill 4(cdfix).exe 04f4dd2b939516b41e9a5e58db2a7289.exe File opened for modification C:\Windows\win32dc\Silent Hill 4_cdfix.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File created C:\Windows\win32dc\DAoC + codes.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File created C:\Windows\win32dc\Half-Life 2 + fix.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File opened for modification C:\Windows\win32dc\FlatOut trainer.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File created C:\Windows\win32dc\Sims 2 + codes.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File created C:\Windows\win32dc\Silent Hill 4_cdfix.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File opened for modification C:\Windows\win32dc\DAoC + codes.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File created C:\Windows\win32dc\Silent Hill 4_serial.exe 04f4dd2b939516b41e9a5e58db2a7289.exe File opened for modification C:\Windows\win32dc\Sims 2_fix.exe 04f4dd2b939516b41e9a5e58db2a7289.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
78KB
MD5bdce109ab5866d4fe27c4a370daf1567
SHA16ecf3a65c8bcd12931819741414de60326137dc3
SHA256a6c92574a78e9503234f1be987cbf2b179dc4a1b09c99b58da3e58a23229110c
SHA5127080fe12cf6213f0467722b211d5289f9f32d5aafe77c82e33a532556606be95c2338ffa209f642def81d5ac473a48ebaed0fb525cb870f45d05502e6f972060