ae314c6f487c3855074d266ad6735148cde8b7dfd9a2815077821cb731da236d

Analysis

max time kernel
130s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
19/01/2024, 09:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

674ee6266375648ef3dbed68402ad21f.exe
Size

122KB
MD5

674ee6266375648ef3dbed68402ad21f
SHA1

5c22afbd6d512391378bd13c62eadcdbf1ac3e72
SHA256

ae314c6f487c3855074d266ad6735148cde8b7dfd9a2815077821cb731da236d
SHA512

d0f1934310081c66c587d0ebbd5924d4476af18e7231f8962cfa8c0cb6a17b3ba5b538d80860f0edeec26a5a2f979ccf5772951c30e7bb96a19ae39e3b7309fe
SSDEEP

3072:blN9RkkkkkkTLJ0YufKOpHuMSIzNLSf1g:5dkkkkkkZpOpHRSwNsg

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/3696-0-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral2/memory/3696-1-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral2/files/0x0006000000023217-6.dat	upx
behavioral2/memory/3696-19-0x0000000000400000-0x0000000000423000-memory.dmp	upx

Drops file in Windows directory 17 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\UT2004 + nocd.exe	674ee6266375648ef3dbed68402ad21f.exe
File opened for modification	C:\Windows\win32dc\Sims 2(nocd).exe	674ee6266375648ef3dbed68402ad21f.exe
File created	C:\Windows\win32dc\DAoC cheat.exe	674ee6266375648ef3dbed68402ad21f.exe
File created	C:\Windows\win32dc\Sims 2 + crack.exe	674ee6266375648ef3dbed68402ad21f.exe
File created	C:\Windows\win32dc\DAoC patch.exe	674ee6266375648ef3dbed68402ad21f.exe
File created	C:\Windows\win32dc\BattleField 1942_codes.exe	674ee6266375648ef3dbed68402ad21f.exe
File created	C:\Windows\win32dc\UT2004 + nocd.exe	674ee6266375648ef3dbed68402ad21f.exe
File created	C:\Windows\win32dc\Doom 3(hack).exe	674ee6266375648ef3dbed68402ad21f.exe
File opened for modification	C:\Windows\win32dc\Sims 2(patch).exe	674ee6266375648ef3dbed68402ad21f.exe
File created	C:\Windows\win32dc\UT2004_nocd.exe	674ee6266375648ef3dbed68402ad21f.exe
File opened for modification	C:\Windows\win32dc\UT2004_nocd.exe	674ee6266375648ef3dbed68402ad21f.exe
File created	C:\Windows\win32dc\Sims 2(nocd).exe	674ee6266375648ef3dbed68402ad21f.exe
File created	C:\Windows\win32dc\Quake3 + cheat.exe	674ee6266375648ef3dbed68402ad21f.exe
File opened for modification	C:\Windows\win32dc\DAoC patch.exe	674ee6266375648ef3dbed68402ad21f.exe
File created	C:\Windows\win32dc\Sims 2(patch).exe	674ee6266375648ef3dbed68402ad21f.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942_codes.exe	674ee6266375648ef3dbed68402ad21f.exe
File opened for modification	C:\Windows\win32dc\DAoC cheat.exe	674ee6266375648ef3dbed68402ad21f.exe

C:\Users\Admin\AppData\Local\Temp\674ee6266375648ef3dbed68402ad21f.exe
"C:\Users\Admin\AppData\Local\Temp\674ee6266375648ef3dbed68402ad21f.exe"
1⤵
- Drops file in Windows directory
PID:3696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\Quake3 + cheat.exe

Filesize
122KB

MD5
674ee6266375648ef3dbed68402ad21f

SHA1
5c22afbd6d512391378bd13c62eadcdbf1ac3e72

SHA256
ae314c6f487c3855074d266ad6735148cde8b7dfd9a2815077821cb731da236d

SHA512
d0f1934310081c66c587d0ebbd5924d4476af18e7231f8962cfa8c0cb6a17b3ba5b538d80860f0edeec26a5a2f979ccf5772951c30e7bb96a19ae39e3b7309fe

Download Submit
memory/3696-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/3696-1-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/3696-19-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads