c12f8cd56f29ade349bf82c638dc25bb8d474cc154cddfd2983487571dcd8a87

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 02:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0c393dc5709bb3837fe80f10f3a6ae2c.exe
Size

228KB
MD5

0c393dc5709bb3837fe80f10f3a6ae2c
SHA1

8755cefde1eace6934ff2e4c3b6d55a2a59c6705
SHA256

c12f8cd56f29ade349bf82c638dc25bb8d474cc154cddfd2983487571dcd8a87
SHA512

7cc3ebacb0b6a704603c45c0648c365fec02d50bf4152e89184b840a7997803622c8df4f494c7bee52693cfc2ce7376ef6581a8aee68c0688e3f41c357488791
SSDEEP

3072:blN9RkkkkkkTLJ0YufKOpHuMpBlN9RkkkkkkTLJ0YufKOpHuMppM:5dkkkkkkZpOpHR5dkkkkkkZpOpHRo

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2924-0-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral1/memory/2924-1-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral1/files/0x000b0000000122f0-6.dat	upx
behavioral1/memory/2924-20-0x0000000000400000-0x0000000000423000-memory.dmp	upx

Drops file in Windows directory 18 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\Half-Life 2(cheat).exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File created	C:\Windows\win32dc\Doom 3 trainer.exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File created	C:\Windows\win32dc\DAoC(hack).exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File opened for modification	C:\Windows\win32dc\DAoC(hack).exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File created	C:\Windows\win32dc\Sims 2 + crack.exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File opened for modification	C:\Windows\win32dc\Sims 2 cheat.exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File created	C:\Windows\win32dc\Sims 2 cheat.exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942(cdfix).exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File opened for modification	C:\Windows\win32dc\Sims 2 + crack.exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike trainer.exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2(cheat).exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File created	C:\Windows\win32dc\BattleField 1942 + codes.exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File created	C:\Windows\win32dc\Counter-Strike(cheat).exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File created	C:\Windows\win32dc\Silent Hill 4_nocd.exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File opened for modification	C:\Windows\win32dc\Doom 3 trainer.exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File created	C:\Windows\win32dc\BattleField 1942(cdfix).exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike(cheat).exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe
File created	C:\Windows\win32dc\Counter-Strike trainer.exe	0c393dc5709bb3837fe80f10f3a6ae2c.exe

C:\Users\Admin\AppData\Local\Temp\0c393dc5709bb3837fe80f10f3a6ae2c.exe
"C:\Users\Admin\AppData\Local\Temp\0c393dc5709bb3837fe80f10f3a6ae2c.exe"
1⤵
- Drops file in Windows directory
PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2924-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2924-1-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2924-20-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads