Analysis
-
max time kernel
64s -
max time network
60s -
platform
windows10-1703_x64 -
resource
win10-20231215-en -
resource tags
arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system -
submitted
23/01/2024, 10:24
Behavioral task
behavioral1
Sample
Auto-Accept-CS2-v3.exe
Resource
win10-20231215-en
Behavioral task
behavioral2
Sample
index.pyc
Resource
win10-20231215-en
General
-
Target
Auto-Accept-CS2-v3.exe
-
Size
16.2MB
-
MD5
c3e398c7cfb8d46f12cd78c56e3c0d7d
-
SHA1
94c96a0a76bffb8b40a36ce32bc8a06ff63594fd
-
SHA256
1e165f6162473052370c1a627b4a620db77296341b24829b28647d4590ac1f09
-
SHA512
be147efd5eb80b8359de06c5fe1014001a5ad0f766ac7d30f8c14ae991ff7163eb90bc42dbca0dcfd60906d59057530f25ab84f01a73169ebd8626427206e165
-
SSDEEP
393216:tAUFi4C3+47zW+eGQRJ9jo/au5qW80hoA/EaBkPtRWv4:tDi4O+kzW+e5RJ9MV5qW80hES4
Malware Config
Signatures
-
Loads dropped DLL 22 IoCs
pid Process 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe 1412 Auto-Accept-CS2-v3.exe -
Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 32 wrote to memory of 1412 32 Auto-Accept-CS2-v3.exe 74 PID 32 wrote to memory of 1412 32 Auto-Accept-CS2-v3.exe 74
Processes
-
C:\Users\Admin\AppData\Local\Temp\Auto-Accept-CS2-v3.exe"C:\Users\Admin\AppData\Local\Temp\Auto-Accept-CS2-v3.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:32 -
C:\Users\Admin\AppData\Local\Temp\Auto-Accept-CS2-v3.exe"C:\Users\Admin\AppData\Local\Temp\Auto-Accept-CS2-v3.exe"2⤵
- Loads dropped DLL
PID:1412
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
92KB
MD534a7f46f272b2b0ebfe116f34f91fbe8
SHA125a89afaf77416c5f62101b47ac3284e60ec3be7
SHA2569c234da0537874ace2f32373fb480b5c8691e943dd6b6a8e4411edbe3493925e
SHA512849b36899b2747baa906bd626d07f440a2c112c62e13cbeed315b9be5fe50f8ea47e10f685c68510ae1925d721bf039f5fb10910308d205be2c17992617954ab
-
Filesize
90KB
MD523efd30f6699ddca3f17da1bb5d8bc41
SHA191aedf08d967ce764960b0603b75cd3476f861a1
SHA256977db624668f4ed85ef04bfdab64342fc5246dbd4a35ab5740a5f98e37df462c
SHA512782c9d22870439ea722d174f0a374fba959de75593fbb2ef4e4158fd3e5a94ee3b4199b013a8dbde34692de168af5018c66170f3b337fa646752629b16c7956d
-
Filesize
149KB
MD52899b49e14cc1e9a87002478ed3c4b45
SHA11efd20c191ef596d3348ad9477fc4371ba49d472
SHA2563a9c002838e72e12bb17e7c91007d04fda1dcbaf18634f627f78637b6f587563
SHA512fe4ec2c2b8588f095b12f1e269d91a6c58e2a3d951e923b4c91af61127b3c53be3e7ba78b9519d502e840a940c96bdb0164a6e04dbf8471509157b6da2cc37f3
-
Filesize
63KB
MD5f495d1897a1b52a2b15c20dcecb84b47
SHA18cb65590a8815bda58c86613b6386b5982d9ec3f
SHA256e47e76d70d508b62924fe480f30e615b12fdd7745c0aac68a2cddabd07b692ae
SHA512725d408892887bebd5bcf040a0ecc6a4e4b608815b9dea5b6f7b95c812715f82079896df33b0830c9f787ffe149b8182e529bb1f78aadd89df264cf8853ee4c4
-
Filesize
137KB
MD58d111ce8b7cb184e806b00f4d4fbc2f6
SHA1adf08702f8334dae8e23c4ba2733250a9d2a0229
SHA256683b3d990ff45ecfebf85ceebb0ab49a216f7468e718987a29835e11fc8f0ac1
SHA512e99f0ee288d62d12e80ba9cfec3b2f145640f7cc207e4364382bb26a4ee26be871964f8329065be728cfd4b226b3da686d77bca3aed8ea33d106dde064a2020b
-
Filesize
34KB
MD5811bcee2f4246265898167b103fc699b
SHA1ae3de8acba56cde71001d3796a48730e1b9c7cce
SHA256fb69005b972dc3703f9ef42e8e0fddf8c835cb91f57ef9b6c66bbdf978c00a8c
SHA5121f71e23ce4b6bc35fe772542d7845dcbea2a34522ba0468b61cb05f9abab7732cbf524bcff498d1bd0b13b5e8a45c373cca19ad20e5370f17259e281edf344be
-
Filesize
86KB
MD5cfb57223abe0a40408db419bc015090a
SHA1409179198b0c8e13b3bd20cdbcfeb99a7107f589
SHA2560c1f1fdc0d5d47d8f8d0f234e2f2cdf5ce447304ffb54053643e25e3fe9e9028
SHA512cf0eafc1e5d460174a5fd8381444da4c14d0111e65bc47a6b4106f340ae69f4affcf2143daf6e316a7c279cb214dc76b5ba11c1244f2f099368f6565d91843df
-
Filesize
549KB
MD5af7adde86aedc0201cc361acc9c1d09f
SHA119c0f67175f616390983baa42ba12657d570e718
SHA256cee608a1cd2d105e018794673543e439674141f9ccf6140911d05227c9b0cb06
SHA5125ea0b728a0a96161f60ec39c630b68f48d188ee87d09885b4cb7b59ad7d6e760621f038f98f46a2f446e2018c56586fa731ced2341cbddd565dc747370f27faf
-
Filesize
250B
MD57d65dcdeb5b855ef22adcc53828f18d6
SHA1043de842b546c1f147c7f95447896d35145a6f00
SHA2565e692d1af2afaa7cc783676cf398bf58d3f1eac7b97bb12e28e2ea5d319376c4
SHA51278e1b6116fb0d4623891aac3dc8a42ea20b37e95c98080b8ba24de4737fb75040659819ce99b7e237e0836cec2ad007c22a14790f4783659f84abfaebaad656a
-
Filesize
110KB
MD521c2aa471731d143df39c86c654e4363
SHA1967a8ac8ef9f18c9e2f353065352779f68b6f92f
SHA2568d1f31eb61aef9eafe98a18b75bc5343846ae8f1c07fba8d5d907d42171f5535
SHA5127eaddf1b9c950982bd894d0af3770cce1eb967f2652e3b58025c03b1e62e473edfbd1dfb5ceb4a47b8de6cb67cf1afa1a59d79c68b5dc7fc941037d56cb063c7
-
Filesize
98KB
MD5c15dc8595654c5a1c0cffe3f6b6a46fe
SHA1f415f502bef1cdca5c2b738e151bbaa9edd3db57
SHA256159bdb9b32dc1f4c122ee22732c14a56f23810c6cfcc9247da4fd5ee2eca766b
SHA512f7e61c8a73b46ab2f44ca28471016b732aa78c1176983ad6b80ffb2efcb4b2b9c1569fff6078ee9d3f7ccdfb74561b63ba6e68f481cd1723c223634dc3205df9
-
Filesize
119KB
MD50900c4671c1c6074e629e77a10f2bb79
SHA14b7d0f89a6de7f48cabd571ff097e6935e202552
SHA25664212059fdccd611aae3cabab123442c49f511ff0baf5764857713bb1f48aa51
SHA51284291b99a897a8873ffe5051ae1cbe91838b4495c493b3b88598d2d0199ece0f78a0eec903a2aedddaa4796b5374615a523be72531e35e37075efe6eb47952c0
-
Filesize
1.3MB
MD5892937a6f34c4a5e0b7179e79fe3bc90
SHA188ab5df1ead05109e44e9a0c2bdfb4b45a5c5b0c
SHA256c68dec20338afab2d953ec7ff56e4d4d282e3c452b0855e1bb16ef3582b79e2e
SHA512dae141fc5692961c67dcca85c1025f95803f7723585a61d8648ed9c7ab82ed59b8e41ca18f6cc30569458848ff81aca20453cde7fc9f35483d164c94b2b2b98d
-
Filesize
174KB
MD54cb45f2e20db8ee938a4124741ee0d64
SHA1a1613759550ab156de91038c59ca3e9d0fe12fd1
SHA256c3c509683e2811f10b35e5ec5d67e4b51b22e12eec0e142973b4bf1c3cc6bd7f
SHA512d25ef9ac4be00849a8776451b41c0475a5b961828bbb49cbaf4779395bb379886c0af3c058aed4d68fccd04250122ea9f81c14127ff13449c55a9a7d7e006701
-
Filesize
1KB
MD5e9117326c06fee02c478027cb625c7d8
SHA12ed4092d573289925a5b71625cf43cc82b901daf
SHA256741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
SHA512d0a39bc41adc32f2f20b1a0ebad33bf48dfa6ed5cc1d8f92700cdd431db6c794c09d9f08bb5709b394acf54116c3a1e060e2abcc6b503e1501f8364d3eebcd52
-
Filesize
110KB
MD5040040f2590a68b648a3e25290530a25
SHA1fb2e3855280fee035ad916990cd7bf4227b476d9
SHA256365ea36cabfe82435c5ab6c7a4ec7b4185278e96a2ac653d045a0adad92e5add
SHA5125dae4cdc05495b4180ebd9ac36dab12596e1f622cadbf13b3ebfc4fc66e4ab7109e8ccee36d77af95f6515d30ed7398fd09b4eb6d3b0398a7e7e537cce46bf82
-
Filesize
127KB
MD5cd98adb25867d641ed0d9eeae2631acd
SHA15252dfcb910a3c8bf8e8fa990d2faf984d3c356d
SHA256fe8b28ca5e3302af0e27911ee94ce58e09ce0fdcf9870c603b68933f69c03ee0
SHA5122008d0dca4a995ac5194022341933225c4a1ba6892fef6ca314e4a72aabc5d36ed5913c41efa04c219768fe880c2574858f35645b61e47e00b3155db69630c8e
-
Filesize
44KB
MD50f69aea9cea8b8758d7d813282344a98
SHA14d9eae04a5d0088260bfad219bcb5e3ed9af04fe
SHA25688d3a39464b4bb8954c94b1f5e88f45c7e175979af13e55b3d787436dbb0ff16
SHA512d913f4ba744e73ad9375b19dc8fd8495da660bdf2b6876487e3d432f58a4e3ffde4426e4078e94bc6245f84d5ea72973cf0955c291ab02edb30d29843be8ad65
-
Filesize
58KB
MD5ad1473e2fe426a74bce29a9daed1835c
SHA12e56aa6787368689709e7c3458512661587ee55f
SHA256a2697c489a312ae642f5654ac8018153e84b10fd9acf35e0569f0269377e2438
SHA512a85da65ebe57a608bf6c96f4796a0d73e707c4afb120508e0936f0b399cb93eca5022eba1098c0805fb8b04b74c826f5a7ed27b3d5f18bc828e4c37c90f58861
-
Filesize
106KB
MD54585a96cc4eef6aafd5e27ea09147dc6
SHA1489cfff1b19abbec98fda26ac8958005e88dd0cb
SHA256a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
SHA512d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286
-
Filesize
69KB
MD52cd68ff636394d3019411611e27d0a3b
SHA1da369c5d1a32f68639170d8a265a9ea49c2c8ebd
SHA2560d4fbd46f922e548060ea74c95e99dc5f19b1df69be17706806760515c1c64fe
SHA51237388d137454f52057b2376d95abcc955fa1edc3e20b96445fa45d1860544e811df0c547f221c8671dc1a4d90262bb20f3b9f114252f3c47a8c3829951a2ce51
-
Filesize
82KB
MD5c7ce973f261f698e3db148ccad057c96
SHA159809fd48e8597a73211c5df64c7292c5d120a10
SHA25602d772c03704fe243c8de2672c210a5804d075c1f75e738d6130a173d08dfcde
SHA512a924750b1825747a622eef93331fd764d824c954297e37e8dc93a450c11aa7ab3ad7c3b823b11656b86e64de3cd5d409fda15db472488dfaa4bb50341f0b29d1
-
Filesize
121KB
MD510fdcf63d1c3c3b7e5861fbb04d64557
SHA11aa153efec4f583643046618b60e495b6e03b3d7
SHA256bc3b83d2dc9e2f0e6386ed952384c6cf48f6eed51129a50dfd5ef6cbbc0a8fb3
SHA512dc702f4100ed835e198507cd06fa5389a063d4600fc08be780690d729ab62114fd5e5b201d511b5832c14e90a5975ed574fc96edb5a9ab9eb83f607c7a712c7f
-
Filesize
61KB
MD529da809368869da0fe867c6eaed1be65
SHA1471700a683c1bc44d5d5edbb4825d56669eedbd0
SHA2567e5eb6f6c7454ade2d47bb42499b665bccac58c4cb104809d72908d20b796d47
SHA5126d0e73938da52e90b342deb40bf4741b7397189fdf8b00136f000cfcb0ad3590251317f5140c86b54f11a0c85bc24affb0cec49cd7942ae40345aeab6d9f8bf7
-
Filesize
120KB
MD5b642bfeb1a9f06dd42d590c1be287148
SHA19c819eb19e8a671c4cd12a052705a15a632ef62f
SHA256539e025a66e518eb4097e16b5167125e6797c570aefc71dee3364bfcaad65405
SHA512530bae90590ff4be1d15da4f66510e1753a5a4724cf71803ea2dac71afdcce9846cd0bb10b96fd60e0de876cd302ab25fb972d8545707e66261db04c46e45fee
-
Filesize
54KB
MD5f9c67280538408411be9a7341b93b5b0
SHA1ccf776cd2483bc83b48b1db322d7b6fcab48356e
SHA2565d298bb811037b583cff6c88531f1742fae5eee47c290adb47ddbd0d6126b9cc
SHA512af2156738893ef504d582ace6750b25bc42ad1ec8a92e0550ce54810706d854f37a82f38eb965a537cad5d35c0178c5eb7b4d20db2a95bebfecf9a13c0592646
-
Filesize
31KB
MD56e00e0821bb519333ccfd4e61a83cb38
SHA13550a41bb2ea54f456940c4d1940acab36815949
SHA2562ad02d49691a629f038f48fcdee46a07c4fcc2cb0620086e7b09ac11915ae6b7
SHA512c3f8332c10b58f30e292676b48ecf1860c5ef9546367b87e90789f960c91eae4d462dd3ee9cb14f603b9086e81b6701aab56da5b635b22db1e758ed0a983e562
-
Filesize
81KB
MD5899380b2d48df53414b974e11bb711e3
SHA1f1d11f7e970a7cd476e739243f8f197fcb3ad590
SHA256b38e66e6ee413e5955ef03d619cadd40fca8be035b43093d2342b6f3739e883e
SHA5127426ca5e7a404b9628e2966dae544f3e8310c697145567b361825dc0b5c6cd87f2caf567def8cd19e73d68643f2f38c08ff4ff0bb0a459c853f241b8fdf40024
-
Filesize
173KB
MD59b4e74fd1de0f8a197e4aa1e16749186
SHA1833179b49eb27c9474b5189f59ed7ecf0e6dc9ea
SHA256a4ce52a9e0daddbbe7a539d1a7eda787494f2173ddcc92a3faf43b7cf597452b
SHA512ae72b39cb47a859d07a1ee3e73de655678fe809c5c17ffd90797b5985924ddb47ceb5ebe896e50216fb445526c4cbb95e276e5f3810035b50e4604363eb61cd4
-
Filesize
62KB
MD5b4d0a483f8007beabd0d4d5b41070057
SHA11dd6a829b9b6e66e4062d7a84e6e0187e828287c
SHA25606ea475cbb786bd1db1c1bbd62546446e571f717303fcf868148e15612a04a65
SHA512aa1599f480ba2825bcbcfe79513b53c8c2393b9fbee34947680b0066b9c75bd4a255fccd3a6625dcbd00e2234810777742135375b01abfa1a0f5a3b49d5f72ae
-
Filesize
35KB
MD5ee33f4c8d17d17ad62925e85097b0109
SHA18c4a03531cf3dbfe6f378fdab9699d51e7888796
SHA25679adca5037d9145309d3bd19f7a26f7bb7da716ee86e01073c6f2a9681e33dad
SHA51260b0705a371ad2985db54a91f0e904eea502108663ea3c3fb18ed54671be1932f4f03e8e3fd687a857a5e3500545377b036276c69e821a7d6116b327f5b3d5c1
-
Filesize
105KB
MD5a98d8c77554d7853f2fc50c62db26e5a
SHA104e646f0dc1fb4ea28c358e24e6cc114bba815df
SHA2560ec00669bcb133cf65c430dda22d4b6527122f3edafcd2960757d36eaca784c1
SHA5122286afeb7deb1d9d5da3901c809d9bb07e15f6bab21201c627a4d307b27b71e30e70f3cf34474827c6ef3bedac2de4dbafaa9a9c8de7bbd05d9b19fb70e583f5
-
Filesize
38KB
MD50f8e4992ca92baaf54cc0b43aaccce21
SHA1c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA256eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
SHA5126e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
-
Filesize
64KB
MD5ea9cd858988b72962f3a138b243c289a
SHA1d4b957aa531df4ca857bf7d7aff2225cf585a60f
SHA256508d73c9a94b6ebca0fe7a101a0e5906e969e1bef273765cb23f4d330311c031
SHA5126d35987eaaedf565e9c3f8831c3373e154b4341de0a20ab4f5e2673ebb7710c60370b79cf0138110d708de35068568fd675370bbb438c5fe218a5545cb671026
-
Filesize
172KB
MD5acc346a09761f7aabaedc85a11ee4a60
SHA1c7c3a0581e4cd0014e233c7d04e57d4314481c06
SHA25682040ece2a6f12dc8e498d62e97fbe49dfd22205ad534378bf66e10b71529006
SHA512eaf877938194ed60914cd63271f7db0285483076378e3d3b57318dd28810f79114fa5a31947938bade6c3c806142f5b07d40a38ae10bfa29b96df7c9526478b0
-
Filesize
123KB
MD5581df70c31fc5464087b8508e3dabdbb
SHA1d3e775be79eca3724dc645cc9d7e665a3406cb4a
SHA25698e785f16d4ab6a5cbff3e7e24e60b7ea8333ece2c20d9dac9ecd1c56ec5e08e
SHA512835ca34cd0617264828b7ffded49ce96fbc2b94c0ea28d5c6b2bf58bc43491d1ebc33b0ef4d19d11b20350e79d474f385c150f41781d2f209fd0b8e069ebf659
-
Filesize
30KB
MD5bffff83a000baf559f3eb2b599a1b7e8
SHA17f9238bda6d0c7cc5399c6b6ab3b42d21053f467
SHA256bc71fbdfd1441d62dd86d33ff41b35dc3cc34875f625d885c58c8dc000064dab
SHA5123c0ba0cf356a727066ae0d0d6523440a882aafb3ebdf70117993effd61395deebf179948f8c7f5222d59d1ed748c71d9d53782e16bd2f2eccc296f2f8b4fc948
-
Filesize
55KB
MD5285d77bd0e40e416738fbc6c84661a73
SHA1a74af4a452f39fe4f8eb87d344b1caeaa1373117
SHA25624627af812d1113d80b4bf0f030a985fa6b484ee391433843e170e3656c71e52
SHA51284150e8abe8a03d8cdf16b8f720425d4cac12758c1530f6f2a4a26f0b14b3828663cd2bb1eec25c79f517669331fa77e958c0d9235dfe9fd7c1cfd91a3185214
-
Filesize
33KB
MD51a145fd760e09260020320c20511eafd
SHA17e1f38650a6c4f6d57a836477f09c12b21059872
SHA256c325d8558406837be92541f4c4989a412bd72080e27bda0511400c27715f48ee
SHA5122a7d2eade68628055a6a0f5efe9ab502f61e1ea8f9bf59a7ffb43b93c9fc4732eb848e3d676e1f2efa9e547e1436cd0b7f0dba745dc128e54bf1db63d23c8dc2
-
Filesize
88KB
MD5bdb2095df6338afd629c538fc0660167
SHA117353bee1f8feacac3361e2252890e2ad24353a6
SHA256cedb72fe93f462d0932385f0568764f168f76257c71946febf4e18c09765236c
SHA512621746e25298468d877c47865a327d2cb3513343221638603b5413a1c43a46b36014be4c9ecca71ef871f90b0ff8d80924296ef5c4de2c25f7e8c5436683cc1f