Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/03/2024, 06:35
Behavioral task
behavioral1
Sample
bac35f192099b04b26510be1c3cdced8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bac35f192099b04b26510be1c3cdced8.exe
Resource
win10v2004-20240226-en
General
-
Target
bac35f192099b04b26510be1c3cdced8.exe
-
Size
599KB
-
MD5
bac35f192099b04b26510be1c3cdced8
-
SHA1
5fe7614738465ba426a4cbf1862c6c50c22a5faf
-
SHA256
e49879acb4ea83ddefa7eb7f6e62537466628aac158eebc8beec63b7f8387fad
-
SHA512
bd67e20da2299f2564a7f9e8af0be24b80ae42f1781f71d71d1c517272d4436e631153640a5bd5a05e3b1caa9d873309eec340ffbfdf6661e1789175811e25a1
-
SSDEEP
6144:5dkkkkkkUnJIU/85o9ofFVlFb03hAdkkkkkkk0nJIU/85o9ofFVlFb03j0gBwBrA:5C65o+fnfH65o+fn8gBrBqgLeRgYMV+b
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2160-0-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2160-1-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/files/0x0037000000016350-6.dat upx behavioral1/memory/2160-18-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2160-19-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2160-20-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2160-21-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2160-22-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2160-23-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2160-25-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2160-26-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2160-27-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2160-28-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2160-29-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2160-31-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2160-32-0x0000000000400000-0x0000000000423000-memory.dmp upx -
Drops file in Windows directory 16 IoCs
description ioc Process File created C:\Windows\win32dc\Counter-Strike + crack.exe bac35f192099b04b26510be1c3cdced8.exe File created C:\Windows\win32dc\UT2004 + trainer.exe bac35f192099b04b26510be1c3cdced8.exe File created C:\Windows\win32dc\DAoC_cdfix.exe bac35f192099b04b26510be1c3cdced8.exe File created C:\Windows\win32dc\FlatOut crack.exe bac35f192099b04b26510be1c3cdced8.exe File created C:\Windows\win32dc\FlatOut nocd.exe bac35f192099b04b26510be1c3cdced8.exe File opened for modification C:\Windows\win32dc\Counter-Strike + cheat.exe bac35f192099b04b26510be1c3cdced8.exe File created C:\Windows\win32dc\Doom 3(cdfix).exe bac35f192099b04b26510be1c3cdced8.exe File created C:\Windows\win32dc\Quake3(patch).exe bac35f192099b04b26510be1c3cdced8.exe File opened for modification C:\Windows\win32dc\Silent Hill 4_trainer.exe bac35f192099b04b26510be1c3cdced8.exe File opened for modification C:\Windows\win32dc\FlatOut + hack.exe bac35f192099b04b26510be1c3cdced8.exe File opened for modification C:\Windows\win32dc\Counter-Strike + crack.exe bac35f192099b04b26510be1c3cdced8.exe File opened for modification C:\Windows\win32dc\Doom 3(cdfix).exe bac35f192099b04b26510be1c3cdced8.exe File opened for modification C:\Windows\win32dc\Quake3(patch).exe bac35f192099b04b26510be1c3cdced8.exe File created C:\Windows\win32dc\Silent Hill 4_trainer.exe bac35f192099b04b26510be1c3cdced8.exe File created C:\Windows\win32dc\Counter-Strike + cheat.exe bac35f192099b04b26510be1c3cdced8.exe File created C:\Windows\win32dc\FlatOut + hack.exe bac35f192099b04b26510be1c3cdced8.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
599KB
MD5bac35f192099b04b26510be1c3cdced8
SHA15fe7614738465ba426a4cbf1862c6c50c22a5faf
SHA256e49879acb4ea83ddefa7eb7f6e62537466628aac158eebc8beec63b7f8387fad
SHA512bd67e20da2299f2564a7f9e8af0be24b80ae42f1781f71d71d1c517272d4436e631153640a5bd5a05e3b1caa9d873309eec340ffbfdf6661e1789175811e25a1