2c9a78590e5581a8347a58883bd147e54dcad50e5b738fc15641cf164af668d5

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 13:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1972149816be5d2a6cca55799d81fa18.exe
Size

96KB
MD5

1972149816be5d2a6cca55799d81fa18
SHA1

13a73c1812dc90082628210b468e004939544a67
SHA256

2c9a78590e5581a8347a58883bd147e54dcad50e5b738fc15641cf164af668d5
SHA512

0e59317ba06af7d047c0e2bd6e09b5424a840d0d25dbcc90a6dac689c75672d30173d527e2540c533980dd38434a0ed63dfa6ee8ae32fb2fe299ea0ff201f6dd
SSDEEP

1536:3UUUUUUUUUUHdTD+vvvvvvvvvh+UUUUUUUC9mIkkkkkkTyhhhhhhhM984DPg/:blN9RkkkkkkTL984DPy

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2204-0-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral1/memory/2204-1-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral1/files/0x002a00000001552e-7.dat	upx
behavioral1/memory/2204-20-0x0000000000400000-0x0000000000423000-memory.dmp	upx

Drops file in Windows directory 18 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\Sims 2_patch.exe	1972149816be5d2a6cca55799d81fa18.exe
File opened for modification	C:\Windows\win32dc\Sims 2_patch.exe	1972149816be5d2a6cca55799d81fa18.exe
File opened for modification	C:\Windows\win32dc\Quake3(trainer).exe	1972149816be5d2a6cca55799d81fa18.exe
File created	C:\Windows\win32dc\FlatOut_patch.exe	1972149816be5d2a6cca55799d81fa18.exe
File created	C:\Windows\win32dc\Counter-Strike + nocd.exe	1972149816be5d2a6cca55799d81fa18.exe
File opened for modification	C:\Windows\win32dc\UT2004 codes.exe	1972149816be5d2a6cca55799d81fa18.exe
File created	C:\Windows\win32dc\Quake3(trainer).exe	1972149816be5d2a6cca55799d81fa18.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4_cdfix.exe	1972149816be5d2a6cca55799d81fa18.exe
File created	C:\Windows\win32dc\Silent Hill 4_cdfix.exe	1972149816be5d2a6cca55799d81fa18.exe
File created	C:\Windows\win32dc\Doom 3_cheat.exe	1972149816be5d2a6cca55799d81fa18.exe
File created	C:\Windows\win32dc\UT2004_cheat.exe	1972149816be5d2a6cca55799d81fa18.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike + nocd.exe	1972149816be5d2a6cca55799d81fa18.exe
File created	C:\Windows\win32dc\UT2004 codes.exe	1972149816be5d2a6cca55799d81fa18.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 codes.exe	1972149816be5d2a6cca55799d81fa18.exe
File created	C:\Windows\win32dc\FlatOut_codes.exe	1972149816be5d2a6cca55799d81fa18.exe
File created	C:\Windows\win32dc\BattleField 1942 codes.exe	1972149816be5d2a6cca55799d81fa18.exe
File opened for modification	C:\Windows\win32dc\FlatOut_patch.exe	1972149816be5d2a6cca55799d81fa18.exe
File opened for modification	C:\Windows\win32dc\Doom 3_cheat.exe	1972149816be5d2a6cca55799d81fa18.exe

C:\Users\Admin\AppData\Local\Temp\1972149816be5d2a6cca55799d81fa18.exe
"C:\Users\Admin\AppData\Local\Temp\1972149816be5d2a6cca55799d81fa18.exe"
1⤵
- Drops file in Windows directory
PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\UT2004 codes.exe

Filesize
100KB

MD5
b8114e3cbedde84be560d54f357f3624

SHA1
c224b2526305deafe290b4e1f11e30f5cfd82e56

SHA256
e26a15d0cc5bd8a671519f6b256f8fe6de20d69c8bb174e1a03d9a3323e46ccf

SHA512
cad4a66cce739785705b7be152a99564801fd604b2a8e49002b3c6acc3264bff45dcb9e5ba97660d2225346d6543dcf8e539bb386521b1702b1892b2fe11756d

Download Submit
memory/2204-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2204-1-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2204-20-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads