2a9f7947cfdde4e242a1f49e079a900c41f82b2a5f0995ece39b7a57a3796d3c

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
23-01-2024 20:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

70780a5c27de2e8f67479c09259245f4.exe
Size

111KB
MD5

70780a5c27de2e8f67479c09259245f4
SHA1

cf674f0f21ffa5909e82f76ac8d813bafd37a35e
SHA256

2a9f7947cfdde4e242a1f49e079a900c41f82b2a5f0995ece39b7a57a3796d3c
SHA512

abaa8b8df9d187405e93d16ebcc8d64ccf4c2716265f2303d7b743775c962f336a5c5cf41baebca489346cb4153cc8c84b1c43844351b1e84244b5d2a665a772
SSDEEP

1536:3UUUUUUUUUUHdTD+vvvvvvvvvh+UUUUUUUC9mIkkkkkkTyhhhhhhhM60pHojwFx6:blN9RkkkkkkTL6C1SU8R+VHkj7

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/1988-0-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral1/memory/1988-1-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral1/files/0x0030000000016609-6.dat	upx
behavioral1/memory/1988-19-0x0000000000400000-0x0000000000423000-memory.dmp	upx

Drops file in Windows directory 19 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\DAoC(nocd).exe	70780a5c27de2e8f67479c09259245f4.exe
File opened for modification	C:\Windows\B.com	70780a5c27de2e8f67479c09259245f4.exe
File created	C:\Windows\win32dc\BattleField 1942_nocd.exe	70780a5c27de2e8f67479c09259245f4.exe
File opened for modification	C:\Windows\win32dc\UT2004 + trainer.exe	70780a5c27de2e8f67479c09259245f4.exe
File created	C:\Windows\win32dc\UT2004 + trainer.exe	70780a5c27de2e8f67479c09259245f4.exe
File created	C:\Windows\win32dc\Sims 2_hack.exe	70780a5c27de2e8f67479c09259245f4.exe
File opened for modification	C:\Windows\win32dc\Sims 2_hack.exe	70780a5c27de2e8f67479c09259245f4.exe
File created	C:\Windows\win32dc\Doom 3_cheat.exe	70780a5c27de2e8f67479c09259245f4.exe
File created	C:\Windows\win32dc\UT2004 + crack.exe	70780a5c27de2e8f67479c09259245f4.exe
File created	C:\Windows\win32dc\BattleField 1942 + hack.exe	70780a5c27de2e8f67479c09259245f4.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 + hack.exe	70780a5c27de2e8f67479c09259245f4.exe
File created	C:\Windows\win32dc\FlatOut codes.exe	70780a5c27de2e8f67479c09259245f4.exe
File created	C:\Windows\win32dc\BattleField 1942_crack.exe	70780a5c27de2e8f67479c09259245f4.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942_crack.exe	70780a5c27de2e8f67479c09259245f4.exe
File created	C:\Windows\win32dc\DAoC(nocd).exe	70780a5c27de2e8f67479c09259245f4.exe
File opened for modification	C:\Windows\win32dc\UT2004 + crack.exe	70780a5c27de2e8f67479c09259245f4.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2(trainer).exe	70780a5c27de2e8f67479c09259245f4.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942_nocd.exe	70780a5c27de2e8f67479c09259245f4.exe
File created	C:\Windows\win32dc\Half-Life 2(trainer).exe	70780a5c27de2e8f67479c09259245f4.exe

C:\Users\Admin\AppData\Local\Temp\70780a5c27de2e8f67479c09259245f4.exe
"C:\Users\Admin\AppData\Local\Temp\70780a5c27de2e8f67479c09259245f4.exe"
1⤵
- Drops file in Windows directory
PID:1988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\UT2004 + trainer.exe

Filesize
113KB

MD5
0f490335b7fbb17fffdf4a32082ac115

SHA1
776b3255f6535c684e8d0155a36db5c573b7a8bf

SHA256
efa0de936e5b7f752dbad742d8130a1c951c7eb5a07f907acedb4e6633fe75ba

SHA512
f7d7e02cdb24b3003a6900f72b2a58033ed31e521bb6cefbfc64098b2aae5929dbd33a3e80e4f22d9fc846f78121bb5965649c0551553e1a0c2ffe04b4dd63b6

Download Submit
memory/1988-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/1988-1-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/1988-19-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads