Analysis

  • max time kernel
    4s
  • platform
    windows11-21h2_x64
  • resource
    win11-20231215-en
  • resource tags

    arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    05/01/2024, 21:56

General

  • Target

    genshin_update_mods_43_f0892.exe

  • Size

    5.7MB

  • MD5

    70998f7004eaadf7cc5340a010e942d4

  • SHA1

    dc1486a469c00c97d8337a00eea4fd5e7a383cac

  • SHA256

    f4ff268a129be3dfd80ed0b36ace508daf404dd94961945f16cb9c237ec5c198

  • SHA512

    a2b2be5591cd67f6880a554cbbed1059dfe3ae738b4c63d1dd058e646d32fe05611495f9e8e5697265f3343378869dfed2d7003be55df7341caebd84b0ee1ed8

  • SSDEEP

    98304:FM8Ba7FTjJ/JyUXO+YsqWWgVYSH2oU17sIvAOXM+CN4/RBhaQlSpXqkun3jEIOfi:FMoaZ9xyUXtYsUgelt73XM+CqBhVSEkp

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\genshin_update_mods_43_f0892.exe
    "C:\Users\Admin\AppData\Local\Temp\genshin_update_mods_43_f0892.exe"
    1⤵
      PID:4080
      • C:\Users\Admin\AppData\Local\Temp\genshin_update_mods_43_f0892.exe
        "C:\Users\Admin\AppData\Local\Temp\genshin_update_mods_43_f0892.exe"
        2⤵
          PID:1592

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\_MEI40802\VCRUNTIME140.dll

        Filesize

        83KB

        MD5

        0c583614eb8ffb4c8c2d9e9880220f1d

        SHA1

        0b7fca03a971a0d3b0776698b51f62bca5043e4d

        SHA256

        6cadb4fef773c23b511acc8b715a084815c6e41dd8c694bc70090a97b3b03fb9

        SHA512

        79bbf50e38e358e492f24fe0923824d02f4b831336dae9572540af1ae7df162457d08de13e720f180309d537667bc1b108bdd782af84356562cca44d3e9e3b64

      • C:\Users\Admin\AppData\Local\Temp\_MEI40802\VCRUNTIME140.dll

        Filesize

        54KB

        MD5

        92f68c8d6d782d78acff4902505da55b

        SHA1

        cc0d59761f4495c054e2b8aaddcc7c3860d1e15e

        SHA256

        d7109090dd8f33fb57ab757e5bd8e98dd772fc00f9dab761d2d2d1cb489dc1f3

        SHA512

        e0740b5429da3a91de581cfbfd04544164f4bf76efa491bbbf72e40c1207646d1fe185f52db0cb345d7f8c09efbacc5fc7712fe984c18a49356e5555a89cf07c

      • C:\Users\Admin\AppData\Local\Temp\_MEI40802\base_library.zip

        Filesize

        33KB

        MD5

        b5bbefd530778cb3103cb1dbf48afc85

        SHA1

        f0af3395bdca2201f91d2cb6e0b393fdbe5de3f3

        SHA256

        b0e9ad12f55ded6e37f08fb437dbb5a547fb679b4608b9653dff5bc4d85f9274

        SHA512

        97d7c698a0f580304089d17bf2befa7974662f840e0d31d52ac1c56d3fbf0b9e640afe3fc65ae0296eaaafe32e5f26d99352aafe4cddfbac82da794b2e534d6b

      • C:\Users\Admin\AppData\Local\Temp\_MEI40802\python37.dll

        Filesize

        69KB

        MD5

        eb5063bffc12cb8f1f38c27ac178da12

        SHA1

        daf88e2084f5c06c4adef728265acae7af8cedc8

        SHA256

        47d2dc2725f671c2ce936d09349ff97a6501d72551e2f5d67915226c50745427

        SHA512

        26de87228eb3072023764e9fb29746ba6e2f51b54e8e9d8589aac378b1fc8af08e8a6d3510b6ea3bad45f6a31c6730a076307d8eae43e03fdd97db3ecaea47b2

      • C:\Users\Admin\AppData\Local\Temp\_MEI40802\python37.dll

        Filesize

        83KB

        MD5

        bc8c8270ae4f51162cd393fb0577d288

        SHA1

        a9b38adb6c2d5e8fd31ee8ee0c0e60eb06334a5d

        SHA256

        0d6a9cbcbfbc96832f9db479e6144e9b7e501d3f1f1274c890778b680c968c70

        SHA512

        7533d1916d38f4a73dac03ce120aac84b67fe1a38376b4583acdbf64739c6045200da234db6868754113224f8347f53d220d2d5f736b2df24b12a235b82a07ed

      • C:\Users\Admin\AppData\Local\Temp\_MEI40802\ucrtbase.dll

        Filesize

        144KB

        MD5

        f710d0293cff4bcccb58fafcc1a237a6

        SHA1

        8e96f3647da0ed5205f2b533150aa084d2cfb540

        SHA256

        84c1fdecbfac52b7f3126610d668a68856ac1bf1e2720c555d6c875a5b54b204

        SHA512

        a1e21afc9e22008169c5a8b15805a8fcd19ac70a2d7f8b6635573376c4cdfba65c50ed86ddf7f9b48b330e3a7a3a3449c01ab6e032e7400ab4f4e1ba68fa4c67

      • C:\Users\Admin\AppData\Local\Temp\_MEI40802\ucrtbase.dll

        Filesize

        166KB

        MD5

        6fd6da392f1460bd9dd30f3612d080da

        SHA1

        2384b17e2a8351db149eeec317cdcf64e92d1f37

        SHA256

        fce0a9cd5651443e1cad86020de555415d27733062d3c51a8b779fb7948ab356

        SHA512

        59abe1891af28d55ab08fb6b78d3b4dd801b200e4bb522a30d97e1926c703efda12682821e6c4dade5a2e704d5b9a255f53ab5d3771e195bbb578f1b203422af