26eb290a78931e0db42515dc2be93053ffbd3b6da164b48808236a164870bdc1

Analysis

max time kernel
97s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
14/02/2024, 10:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

9b78f19fe7494b30d8de9d4272bfb0e0.exe
Size

231KB
MD5

9b78f19fe7494b30d8de9d4272bfb0e0
SHA1

1acae8ea4ade7e0e276fc55d22e69503b7daf6c8
SHA256

26eb290a78931e0db42515dc2be93053ffbd3b6da164b48808236a164870bdc1
SHA512

e857d4464814bcc8bd1ba946ec587373a52fe7a263f407b8101495bd1b878fe0e5f087195d1f4b791acb686be86aa937e462b043f66026595fc629da612185f8
SSDEEP

3072:blN9RkkkkkkTLJ0YufK1lN9RkkkkkkTLJ0YufKVt+c5fP:5dkkkkkkZpzdkkkkkkZp3TP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/4476-0-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral2/memory/4476-1-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral2/files/0x0006000000023162-7.dat	upx
behavioral2/memory/4476-19-0x0000000000400000-0x0000000000423000-memory.dmp	upx

Drops file in System32 directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\GOynGeLQGiVHOuUg.com	9b78f19fe7494b30d8de9d4272bfb0e0.exe

Drops file in Windows directory 17 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\FlatOut_crack.exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File created	C:\Windows\win32dc\Sims 2(cheat).exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File created	C:\Windows\win32dc\Half-Life 2(trainer).exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File created	C:\Windows\win32dc\FlatOut_crack.exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4(nocd).exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File created	C:\Windows\win32dc\Half-Life 2_cdfix.exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File created	C:\Windows\win32dc\Silent Hill 4(codes).exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File opened for modification	C:\Windows\win32dc\Sims 2(cheat).exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File created	C:\Windows\win32dc\Counter-Strike + fix.exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File created	C:\Windows\win32dc\Silent Hill 4 nocd.exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4 nocd.exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2 + serial.exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike + fix.exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File created	C:\Windows\win32dc\Silent Hill 4(nocd).exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File created	C:\Windows\win32dc\DAoC hack.exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2(trainer).exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe
File created	C:\Windows\win32dc\Half-Life 2 + serial.exe	9b78f19fe7494b30d8de9d4272bfb0e0.exe

C:\Users\Admin\AppData\Local\Temp\9b78f19fe7494b30d8de9d4272bfb0e0.exe
"C:\Users\Admin\AppData\Local\Temp\9b78f19fe7494b30d8de9d4272bfb0e0.exe"
1⤵
- Drops file in System32 directory
- Drops file in Windows directory
PID:4476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\FlatOut_crack.exe

Filesize
235KB

MD5
0100aa4563031292fafcbb33de7a196f

SHA1
17a40eab4753f3c25abb62f78e17b82e1b956bdc

SHA256
b58cb577719855f0311084a8e374dc8d10a39214e82ce2fa352495181787c2c3

SHA512
f2748611bd73bd75c912b6c446c034fb170de15c410facc33ea977c80b9a1294b24565d5dbc0888ce874dd491db4b47edad09b2b2925fb295d973e230ef4425e

Download Submit
memory/4476-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/4476-1-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/4476-19-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads