2559cee91008cc11beb5b42d04dc61a18ab2bb071323f93c795e22025ae7418e

Analysis

max time kernel
92s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
14-02-2024 07:11

Target

9b14c219bc2bfa6018cb44207bdb7e87.exe
Size

92KB
MD5

9b14c219bc2bfa6018cb44207bdb7e87
SHA1

a352212979b6c617f3d8e2fc8dbda3e7e24f120b
SHA256

2559cee91008cc11beb5b42d04dc61a18ab2bb071323f93c795e22025ae7418e
SHA512

f4dd8b0a151cea9ba67ac3dcffdf0c5760589abdf3398bab9dc5cfac3ea26d2a66b2fcbe256e511877d14a6fe60f89a1eceb46226b0bf1d9c2ac5fdcc5f61252
SSDEEP

1536:3UUUUUUUUUUHdTD+vvvvvvvvvh+UUUUUUUC9mIkkkkkkTyhhhhhhhMBUpiT6J:blN9RkkkkkkTLBUpiTI

Score

7^/10

upx

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4244-0-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral2/memory/4244-1-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral2/files/0x0006000000023221-6.dat	upx
behavioral2/memory/4244-18-0x0000000000400000-0x0000000000423000-memory.dmp	upx

Drops file in Windows directory 16 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\BattleField 1942 nocd.exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 nocd.exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File created	C:\Windows\win32dc\DAoC codes.exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File opened for modification	C:\Windows\win32dc\FlatOut cheat.exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File created	C:\Windows\win32dc\DAoC(crack).exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File opened for modification	C:\Windows\win32dc\DAoC(crack).exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File created	C:\Windows\win32dc\Half-Life 2 + fix.exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File opened for modification	C:\Windows\win32dc\FlatOut_hack.exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File created	C:\Windows\win32dc\FlatOut cheat.exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File created	C:\Windows\win32dc\Sims 2(fix).exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File opened for modification	C:\Windows\win32dc\DAoC codes.exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File created	C:\Windows\win32dc\FlatOut_hack.exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File created	C:\Windows\win32dc\DAoC_patch.exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File created	C:\Windows\win32dc\Counter-Strike cdfix.exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File created	C:\Windows\win32dc\DAoC(trainer).exe	9b14c219bc2bfa6018cb44207bdb7e87.exe
File opened for modification	C:\Windows\win32dc\DAoC(trainer).exe	9b14c219bc2bfa6018cb44207bdb7e87.exe

C:\Users\Admin\AppData\Local\Temp\9b14c219bc2bfa6018cb44207bdb7e87.exe
"C:\Users\Admin\AppData\Local\Temp\9b14c219bc2bfa6018cb44207bdb7e87.exe"
1⤵
- Drops file in Windows directory
PID:4244

C:\Windows\win32dc\Half-Life 2 + fix.exe

Filesize
92KB

MD5
9b14c219bc2bfa6018cb44207bdb7e87

SHA1
a352212979b6c617f3d8e2fc8dbda3e7e24f120b

SHA256
2559cee91008cc11beb5b42d04dc61a18ab2bb071323f93c795e22025ae7418e

SHA512
f4dd8b0a151cea9ba67ac3dcffdf0c5760589abdf3398bab9dc5cfac3ea26d2a66b2fcbe256e511877d14a6fe60f89a1eceb46226b0bf1d9c2ac5fdcc5f61252

Download Submit
memory/4244-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/4244-1-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/4244-18-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download