Analysis

  • max time kernel
    129s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-03-2024 08:20

General

  • Target

    https://download2285.mediafire.com/agc7uewee9dgzH6Gz_HBE2ClugX3-mVM1kjiKKmtKhZE2jKtqr66w3-xDBWMP8pKbZDe9K14D1uQP_7C_-D5ix7shS7E0Mb-ON6YQfvVrZgq1bQWGzjgdZpN1txc_N13ajoMDQRLAbFn90GpgECjAdx-F_mUYZeQMS8RckIJJlU/ztmu7u8cbnr8q1c/Setup_Game+v3.17.rar

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://download2285.mediafire.com/agc7uewee9dgzH6Gz_HBE2ClugX3-mVM1kjiKKmtKhZE2jKtqr66w3-xDBWMP8pKbZDe9K14D1uQP_7C_-D5ix7shS7E0Mb-ON6YQfvVrZgq1bQWGzjgdZpN1txc_N13ajoMDQRLAbFn90GpgECjAdx-F_mUYZeQMS8RckIJJlU/ztmu7u8cbnr8q1c/Setup_Game+v3.17.rar
    1⤵
      PID:4704
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=4744 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:1
      1⤵
        PID:2916
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=5756 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:1
        1⤵
          PID:2424
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5032 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:8
          1⤵
            PID:3220
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --no-appcompat-clear --mojo-platform-channel-handle=5780 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:8
            1⤵
              PID:3588
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --mojo-platform-channel-handle=4068 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:1
              1⤵
                PID:3836
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --mojo-platform-channel-handle=5416 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:1
                1⤵
                  PID:4988
                • C:\Windows\system32\werfault.exe
                  werfault.exe /h /shared Global\fcb4b5514ea345f59fd42131d1b4864f /t 732 /p 1772
                  1⤵
                    PID:5108
                  • C:\Program Files\VideoLAN\VLC\vlc.exe
                    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\StepBlock.m4a"
                    1⤵
                      PID:2264

                    Network

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    • memory/2264-0-0x00007FF687730000-0x00007FF687828000-memory.dmp

                      Filesize

                      992KB

                    • memory/2264-1-0x00007FFC07650000-0x00007FFC07684000-memory.dmp

                      Filesize

                      208KB

                    • memory/2264-2-0x00007FFBF0980000-0x00007FFBF0C34000-memory.dmp

                      Filesize

                      2.7MB

                    • memory/2264-3-0x00007FFC00540000-0x00007FFC00558000-memory.dmp

                      Filesize

                      96KB

                    • memory/2264-4-0x00007FFC00520000-0x00007FFC00537000-memory.dmp

                      Filesize

                      92KB

                    • memory/2264-5-0x00007FFBFFBB0000-0x00007FFBFFBC1000-memory.dmp

                      Filesize

                      68KB

                    • memory/2264-7-0x00007FFBFFB70000-0x00007FFBFFB81000-memory.dmp

                      Filesize

                      68KB

                    • memory/2264-9-0x00007FFBFFAC0000-0x00007FFBFFAD1000-memory.dmp

                      Filesize

                      68KB

                    • memory/2264-8-0x00007FFBFFAE0000-0x00007FFBFFAFD000-memory.dmp

                      Filesize

                      116KB

                    • memory/2264-6-0x00007FFBFFB90000-0x00007FFBFFBA7000-memory.dmp

                      Filesize

                      92KB