dffdacf51e351220803d30bd9262bf0181f0b9193005797156034f9a896c8fa5

Submit
Reports

Overview

overview

Static

static

Epic.Battl....4.zip

windows10-2004-x64

Epic.Battl...R/hash

windows10-2004-x64

Epic.Battl...es.xml

windows10-2004-x64

Epic.Battl...er.swf

windows10-2004-x64

Epic.Battl...es.exe

windows10-2004-x64

Epic.Battl...ME.txt

windows10-2004-x64

Epic.Battl...og.txt

windows10-2004-x64

Epic.Battl...metype

windows10-2004-x64

Epic.Battl...s.meow

windows10-2004-x64

Epic.Battl...pi.dll

windows10-2004-x64

Epic.Battl...id.txt

windows10-2004-x64

Epic.Battl...me.txt

windows10-2004-x64

Epic.Battl...ge.txt

windows10-2004-x64

Epic.Battl...er.jpg

windows10-2004-x64

Epic.Battl... 1.jpg

windows10-2004-x64

Epic.Battl... 2.jpg

windows10-2004-x64

Epic.Battl... 3.jpg

windows10-2004-x64

Epic.Battl... 4.jpg

windows10-2004-x64

Epic.Battl... 5.jpg

windows10-2004-x64

Epic.Battl... 6.jpg

windows10-2004-x64

Epic.Battl...r.html

windows10-2004-x64

Epic.Battl...er.swf

windows10-2004-x64

Epic.Battl...!!.txt

windows10-2004-x64

Epic.Battl...PC.url

windows10-2004-x64

Epic.Battl...up.exe

windows10-2004-x64

Epic.Battl...up.exe

windows10-2004-x64

Epic.Battl...st.exe

windows10-2004-x64

Epic.Battl...64.exe

windows10-2004-x64

Epic.Battl...86.exe

windows10-2004-x64

Epic.Battl...64.exe

windows10-2004-x64

Epic.Battl...86.exe

windows10-2004-x64

Epic.Battl...st.msi

windows10-2004-x64

Analysis

max time kernel
129s
max time network
314s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08-04-2024 14:46

Sharing

Copy URL

Twitter E-mail

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

Epic.Battle.Fantasy.5.v2.1.4.zip

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral2

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/META-INF/AIR/hash

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral3

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/META-INF/signatures.xml

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral4

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/NPC maker.swf

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral5

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/QRes.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/READ ME.txt

Resource

win10v2004-20240319-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral7

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/errorLog.txt

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral8

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/mimetype

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral9

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/options.meow

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral10

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/steam_api.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral11

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/steam_appid.txt

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral12

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/steam_settings/force_account_name.txt

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral13

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/steam_settings/force_language.txt

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral14

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/wallpapers/main wallpaper.jpg

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral15

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/wallpapers/wallpaper 1.jpg

Resource

win10v2004-20240319-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral16

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/wallpapers/wallpaper 2.jpg

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral17

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/wallpapers/wallpaper 3.jpg

Resource

win10v2004-20240319-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral18

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/wallpapers/wallpaper 4.jpg

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral19

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/wallpapers/wallpaper 5.jpg

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral20

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/wallpapers/wallpaper 6.jpg

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral21

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/wrapper.html

Resource

win10v2004-20240226-en

windows10-2004-x64

8 signatures

300 seconds

Behavioral task

behavioral22

Sample

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/wrapper.swf

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral23

Sample

Epic.Battle.Fantasy.5.v2.1.4/HOW TO RUN GAME!!.txt

Resource

win10v2004-20240319-en

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral24

Sample

Epic.Battle.Fantasy.5.v2.1.4/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral25

Sample

Epic.Battle.Fantasy.5.v2.1.4/_Redist/dotNetFx40_Full_setup.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral26

Sample

Epic.Battle.Fantasy.5.v2.1.4/_Redist/dxwebsetup.exe

Resource

win10v2004-20240226-en

persistence

windows10-2004-x64

6 signatures

300 seconds

Behavioral task

behavioral27

Sample

Epic.Battle.Fantasy.5.v2.1.4/_Redist/oalinst.exe

Resource

win10v2004-20240226-en

discovery

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral28

Sample

Epic.Battle.Fantasy.5.v2.1.4/_Redist/vcredist_2015-2019_x64.exe

Resource

win10v2004-20240226-en

discovery

windows10-2004-x64

4 signatures

300 seconds

Behavioral task

behavioral29

Sample

Epic.Battle.Fantasy.5.v2.1.4/_Redist/vcredist_2015-2019_x86.exe

Resource

win10v2004-20240226-en

discovery

windows10-2004-x64

4 signatures

300 seconds

Behavioral task

behavioral30

Sample

Epic.Battle.Fantasy.5.v2.1.4/_Redist/vcredist_x64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral31

Sample

Epic.Battle.Fantasy.5.v2.1.4/_Redist/vcredist_x86.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral32

Sample

Epic.Battle.Fantasy.5.v2.1.4/_Redist/xnafx40_redist.msi

Resource

win10v2004-20240319-en

windows10-2004-x64

3 signatures

300 seconds

Report Analysis Logs

General

Target

Epic.Battle.Fantasy.5.v2.1.4/Epic.Battle.Fantasy.5.v2.1.4/options.meow
Size

178B
MD5

9f10fd26679d83bd1eea4b87da865d0c
SHA1

5f95ad26f8861da48446f5906cc8730d1b8660fa
SHA256

f08d83388018b597bb692668afd8c86778eec5d66456be3829aa65f8483c0bd0
SHA512

76c374824a57c0bc24f4c0301403a285aefd2746a9a2b550eb2d40bd15b79d29adbb92e9a037972892311ba72f861d9a2a1cd409b54f60e1fa75acd841328e74

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

2540 OpenWith.exe

pid	process
2540	OpenWith.exe

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Epic.Battle.Fantasy.5.v2.1.4\Epic.Battle.Fantasy.5.v2.1.4\options.meow
1⤵
- Modifies registry class
PID:1436

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2540

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads