Analysis
-
max time kernel
11s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25-12-2023 06:39
Static task
static1
Behavioral task
behavioral1
Sample
0c3b1a8d36c7dcdcf58f179f28512882.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c3b1a8d36c7dcdcf58f179f28512882.exe
Resource
win10v2004-20231222-en
General
-
Target
0c3b1a8d36c7dcdcf58f179f28512882.exe
-
Size
94KB
-
MD5
0c3b1a8d36c7dcdcf58f179f28512882
-
SHA1
73804c5ac44c76d945c5d2fecb4a3d613d3b8121
-
SHA256
22f8db278937dd27eb6c206f08f6325dd6295bc032157d870ec6093cbe521f63
-
SHA512
7a3493c1ffea86428a0ade80386ab6fc82f96db8e4e4e68524a79648208f42a7ca4d79133457fa1894cc388808c1666d1d78410164df6254bf3ebdb987d567cf
-
SSDEEP
1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzSwfYfDvzmCS7kYoti:lV2BZVPlFlnxClFvLLcA+sPDzSwfKM7v
Malware Config
Signatures
-
Drops file in Windows directory 17 IoCs
description ioc Process File opened for modification C:\Windows\win32dc\Doom 3 trainer.exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File opened for modification C:\Windows\win32dc\Doom 3_serial.exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File created C:\Windows\win32dc\UT2004 cheat.exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File created C:\Windows\win32dc\Sims 2(cheat).exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File created C:\Windows\win32dc\Counter-Strike codes.exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File opened for modification C:\Windows\win32dc\Counter-Strike codes.exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File created C:\Windows\win32dc\UT2004 hack.exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File opened for modification C:\Windows\win32dc\UT2004 hack.exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File created C:\Windows\win32dc\Doom 3_serial.exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File created C:\Windows\win32dc\Quake3 + cheat.exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File opened for modification C:\Windows\win32dc\Quake3 + cheat.exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File created C:\Windows\win32dc\BattleField 1942_cheat.exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File opened for modification C:\Windows\win32dc\BattleField 1942_cheat.exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File opened for modification C:\Windows\win32dc\Counter-Strike(patch).exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File created C:\Windows\win32dc\Doom 3 trainer.exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File opened for modification C:\Windows\win32dc\Sims 2(cheat).exe 0c3b1a8d36c7dcdcf58f179f28512882.exe File created C:\Windows\win32dc\Counter-Strike(patch).exe 0c3b1a8d36c7dcdcf58f179f28512882.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
94KB
MD554cd141a00a4fc26fef3cf0f70df1563
SHA17489813a51ea60b087cf90b83cc1e2f3f95ab50d
SHA2569babbf9ff57032fdd650fe5fce63aa2cf7c8bfccd258362dfcda86541c34d4e6
SHA51248f0a4f82f73117baa9ae4e011fce13482c99d19ee2e64dd824c75d91c16f40de260aff67fa7d03423907c2022b5c6cc3fa632fe645ad89d7663ccb806548782