Analysis

  • max time kernel
    34s
  • max time network
    34s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/04/2024, 10:36

General

  • Target

    Twitch Workshop_PTO.exe

  • Size

    5.4MB

  • MD5

    c92f29bd1e09e815eeb1fead3d44e209

  • SHA1

    8399b57f82611734c986c9b7a8a1c87f4df13510

  • SHA256

    22d8d5b78f6d66c052c1c489672131e0d65214bf4bf129f15085af8bad34cdff

  • SHA512

    d72f4a1e59190f13ef3888f1322ae28a8e73bc3a3c89da824197fffef993d5ff491411411f04ebcb595c59aa327de0fefe9a831e463b38139826ec48a6c969ea

  • SSDEEP

    98304:E4Hh3K1Z5NmNPpJWHlNKlR5RQlUOinPWsNiakWzWKJWmvG25/NZpTMNvCSfEj9:kT4QlUJnP9UszJWB2RlTMNB

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Twitch Workshop_PTO.exe
    "C:\Users\Admin\AppData\Local\Temp\Twitch Workshop_PTO.exe"
    1⤵
    • Loads dropped DLL
    PID:2276

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\evb35E6.tmp

          Filesize

          1KB

          MD5

          da775b18f46d3050beca4298d80ba767

          SHA1

          8e2141245a586e00e8e1a34e95f87d2af359469c

          SHA256

          d3d1dc6cb05b53404224c56cb8cca4b3ef78c3d412c5d8154d040761656f1129

          SHA512

          30421f402d180b56e63bd54bfa9379fb904106ac57034a4f49989fc85dc411286361bc6fd3a85f8c4a7d8ed721794769e678e4230f1c01f5716538618332b86f

        • C:\Users\Admin\AppData\Local\Temp\evb3687.tmp

          Filesize

          1KB

          MD5

          ff1b5999728bbe9bcbb3dc7ed6d2fc9d

          SHA1

          a0f3d8d4ce83f49ec79ac79c4da349d5836269bd

          SHA256

          7a96ff1a605635555cb581b50db5aaf0db5e4d7956b2f28096f8b4467f70a97d

          SHA512

          60729d21e81b2e45f75fbf3a1bd65dfac7b8dac71abcfc96373efbc2285a181fce73569dcc0a48a554e09434f57cd6ee270c37296b3e95d7dd6ad0518267c788

        • C:\Users\Admin\AppData\Local\Temp\evb3698.tmp

          Filesize

          1KB

          MD5

          39bbd35a55e6cef697ddd71a68d96405

          SHA1

          c100af0d1e758c13bed0fb0fdb5f9b5c87cc2217

          SHA256

          e7bfaf95416f3ac56bd8d5cc3c48a67b75194a77772af1b431b853deb4e2614f

          SHA512

          c2cd61bc163860fd22e5e477bb7a5c6ddcf271bacb047a5264e2d96b60b6821d59aefffa21e43d240ac8f0fd2a381cba9f1cfde70baf7e46f3928e321d60bec5

        • memory/2276-6-0x0000000005840000-0x0000000005A16000-memory.dmp

          Filesize

          1.8MB

        • memory/2276-40-0x0000000010000000-0x0000000010307000-memory.dmp

          Filesize

          3.0MB

        • memory/2276-5-0x0000000003060000-0x0000000003070000-memory.dmp

          Filesize

          64KB

        • memory/2276-0-0x0000000000FC0000-0x00000000012FA000-memory.dmp

          Filesize

          3.2MB

        • memory/2276-3-0x0000000000FC0000-0x00000000012B2000-memory.dmp

          Filesize

          2.9MB

        • memory/2276-10-0x0000000003150000-0x000000000316C000-memory.dmp

          Filesize

          112KB

        • memory/2276-23-0x0000000003150000-0x000000000316C000-memory.dmp

          Filesize

          112KB

        • memory/2276-27-0x0000000010000000-0x0000000010022000-memory.dmp

          Filesize

          136KB

        • memory/2276-2-0x0000000077E63000-0x0000000077E64000-memory.dmp

          Filesize

          4KB

        • memory/2276-1-0x0000000077E62000-0x0000000077E63000-memory.dmp

          Filesize

          4KB

        • memory/2276-36-0x0000000010000000-0x0000000010307000-memory.dmp

          Filesize

          3.0MB

        • memory/2276-4-0x0000000074CE0000-0x0000000075490000-memory.dmp

          Filesize

          7.7MB

        • memory/2276-41-0x0000000010000000-0x0000000010307000-memory.dmp

          Filesize

          3.0MB

        • memory/2276-44-0x0000000006220000-0x0000000006393000-memory.dmp

          Filesize

          1.4MB

        • memory/2276-46-0x0000000005750000-0x0000000005763000-memory.dmp

          Filesize

          76KB

        • memory/2276-50-0x0000000000FC0000-0x00000000012FA000-memory.dmp

          Filesize

          3.2MB

        • memory/2276-51-0x0000000074CE0000-0x0000000075490000-memory.dmp

          Filesize

          7.7MB

        • memory/2276-55-0x0000000010000000-0x0000000010307000-memory.dmp

          Filesize

          3.0MB

        • memory/2276-56-0x0000000003060000-0x0000000003070000-memory.dmp

          Filesize

          64KB

        • memory/2276-57-0x0000000003150000-0x000000000316C000-memory.dmp

          Filesize

          112KB

        • memory/2276-58-0x0000000010000000-0x0000000010022000-memory.dmp

          Filesize

          136KB

        • memory/2276-70-0x0000000010000000-0x0000000010307000-memory.dmp

          Filesize

          3.0MB

        • memory/2276-74-0x0000000010000000-0x0000000010307000-memory.dmp

          Filesize

          3.0MB