14c7015e01623b055c16826c0b4c35881b978b7be8c956f5748276497f6a7142

Analysis

max time kernel
9s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 16:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2ca5c20bb50e0a25cd1718a2496ad1e1.exe
Size

76KB
MD5

2ca5c20bb50e0a25cd1718a2496ad1e1
SHA1

1590af5ae42ed152c3eae02e4f897e1a939575fa
SHA256

14c7015e01623b055c16826c0b4c35881b978b7be8c956f5748276497f6a7142
SHA512

1935a4ddb52a7ed0138c88644c5c5a7e7d5d4970032aefd6c78d46014aff745d39949fef4101596e884eea083101cdf238f91e55194a2c6ca6b7aeef631cd142
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDz7XeVkOa:lV2BZVPlFlnxClFvLLcA+sPDz7XeVkn

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 17 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\Sims 2_trainer.exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File created	C:\Windows\win32dc\DAoC_trainer.exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File created	C:\Windows\win32dc\DAoC(nocd).exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File opened for modification	C:\Windows\win32dc\DAoC(nocd).exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File opened for modification	C:\Windows\win32dc\Quake3_patch.exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File opened for modification	C:\Windows\win32dc\Doom 3(cdfix).exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File created	C:\Windows\win32dc\DAoC + cdfix.exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File created	C:\Windows\win32dc\Quake3_patch.exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File created	C:\Windows\win32dc\Sims 2_trainer.exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File opened for modification	C:\Windows\win32dc\UT2004 crack.exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File created	C:\Windows\win32dc\Counter-Strike + hack.exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File created	C:\Windows\win32dc\Counter-Strike_hack.exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File created	C:\Windows\win32dc\Doom 3(cdfix).exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File opened for modification	C:\Windows\win32dc\DAoC_trainer.exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File created	C:\Windows\win32dc\UT2004 crack.exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike + hack.exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe
File created	C:\Windows\win32dc\DAoC_nocd.exe	2ca5c20bb50e0a25cd1718a2496ad1e1.exe

C:\Users\Admin\AppData\Local\Temp\2ca5c20bb50e0a25cd1718a2496ad1e1.exe
"C:\Users\Admin\AppData\Local\Temp\2ca5c20bb50e0a25cd1718a2496ad1e1.exe"
1⤵
- Drops file in Windows directory
PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\Counter-Strike + hack.exe

Filesize
77KB

MD5
63aa01c1a58987e54c5e2aa77e27d8f8

SHA1
5a643a26d577bde6209a45223f5d569834b18f8e

SHA256
f0034c7368de3a33a6ae39b513fe23a8aad485f2e28a3819148c8bcb0e3f7046

SHA512
9235367d5f01b8f275fe504a51d90519a69cc4236a2a144b0ef3a1322763e79870270bcac26df3b24bfd9694ff83742948b046314dc30d5634c361d863fc6579

Download Submit
memory/2052-16-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads