fbd255893a2a218b4f1bf3114318e125f0898368428ac81d7cbedd480ded735e

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
08/01/2024, 00:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4a29157a27c0359a628e2330f56b383d.exe
Size

111KB
MD5

4a29157a27c0359a628e2330f56b383d
SHA1

6fa86afde8b17149b822d9ce34bb59f15773f0c5
SHA256

fbd255893a2a218b4f1bf3114318e125f0898368428ac81d7cbedd480ded735e
SHA512

7556af0b4f746c3790023284e18b7836f7c3ed22be2fe0680fabaa4eb1c86fddde6e1b78d20809417eeebd9aed19663b3751015f84411d4ffb0aeaefc7bacdb4
SSDEEP

1536:3UUUUUUUUUUHdTD+vvvvvvvvvh+UUUUUUUC9mIkkkkkkTyhhhhhhhMqgCZVU4H/W:blN9RkkkkkkTLqDX3fQKHIb

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/4512-0-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral2/memory/4512-1-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral2/files/0x0008000000023105-6.dat	upx
behavioral2/memory/4512-20-0x0000000000400000-0x0000000000423000-memory.dmp	upx

Drops file in Windows directory 18 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\Half-Life 2 cheat.exe	4a29157a27c0359a628e2330f56b383d.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942_fix.exe	4a29157a27c0359a628e2330f56b383d.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2 fix.exe	4a29157a27c0359a628e2330f56b383d.exe
File created	C:\Windows\win32dc\Half-Life 2 hack.exe	4a29157a27c0359a628e2330f56b383d.exe
File created	C:\Windows\win32dc\FlatOut(cheat).exe	4a29157a27c0359a628e2330f56b383d.exe
File created	C:\Windows\win32dc\Doom 3 + trainer.exe	4a29157a27c0359a628e2330f56b383d.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike patch.exe	4a29157a27c0359a628e2330f56b383d.exe
File opened for modification	C:\Windows\win32dc\FlatOut(cheat).exe	4a29157a27c0359a628e2330f56b383d.exe
File opened for modification	C:\Windows\win32dc\Doom 3 + trainer.exe	4a29157a27c0359a628e2330f56b383d.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2(cheat).exe	4a29157a27c0359a628e2330f56b383d.exe
File created	C:\Windows\win32dc\Half-Life 2 fix.exe	4a29157a27c0359a628e2330f56b383d.exe
File created	C:\Windows\win32dc\UT2004_cheat.exe	4a29157a27c0359a628e2330f56b383d.exe
File opened for modification	C:\Windows\win32dc\UT2004_cheat.exe	4a29157a27c0359a628e2330f56b383d.exe
File created	C:\Windows\win32dc\Counter-Strike_codes.exe	4a29157a27c0359a628e2330f56b383d.exe
File created	C:\Windows\win32dc\Half-Life 2 cheat.exe	4a29157a27c0359a628e2330f56b383d.exe
File created	C:\Windows\win32dc\BattleField 1942_fix.exe	4a29157a27c0359a628e2330f56b383d.exe
File created	C:\Windows\win32dc\Half-Life 2(cheat).exe	4a29157a27c0359a628e2330f56b383d.exe
File created	C:\Windows\win32dc\Counter-Strike patch.exe	4a29157a27c0359a628e2330f56b383d.exe

C:\Users\Admin\AppData\Local\Temp\4a29157a27c0359a628e2330f56b383d.exe
"C:\Users\Admin\AppData\Local\Temp\4a29157a27c0359a628e2330f56b383d.exe"
1⤵
- Drops file in Windows directory
PID:4512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\UT2004_cheat.exe

Filesize
113KB

MD5
8ebf0eae0b312363391e33468ecf8129

SHA1
33109bcfb64eab759eb1773198be362dda721044

SHA256
41add8d9c76c53be3ecd6e27b0e897ac11fdb15d7265daf707790cca34842d74

SHA512
75f6ea51b14177a013f264cef864e5c1bb080ed732090d25ff2f7f917a5d0cc4be5e92d070e5b26c289e7b2ebb62ba432e5e8451ca919323d650a2f0ee61cc07

Download Submit
memory/4512-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/4512-1-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/4512-20-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads