Analysis
-
max time kernel
1566s -
max time network
1570s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
24-04-2024 15:27
General
-
Target
gta 3/Setap-Filess/Setup.exe
-
Size
938KB
-
MD5
b15bac961f62448c872e1dc6d3931016
-
SHA1
1dcb61babb08fe5db711e379cb67335357a5db82
-
SHA256
bf1a0c67b433f52ebd304553f022baa34bfbca258c932d2b4b8b956b1467bfa5
-
SHA512
932119f7dc6710239481c80ad8baaed5c14a2085fcc514b6522671b1a4ebbaf488e43453f11d5aaf6dcef7a245db8de44d93ff255f7cf8385b7d00f31f2cc370
-
SSDEEP
24576:KjNRyoUXVwSCwfHACpA9EZkHx1KJ9ZiYwadzv:AzyLXVwPwfHACpAfRAhiYwadzv
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious behavior: MapViewOfSection 2 IoCs
-
Suspicious use of WriteProcessMemory 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\gta 3\Setap-Filess\Setup.exe"C:\Users\Admin\AppData\Local\Temp\gta 3\Setap-Filess\Setup.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\more.comC:\Windows\SysWOW64\more.com2⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\RcClientBase.au3C:\Users\Admin\AppData\Local\Temp\RcClientBase.au33⤵
- Loads dropped DLL
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD596219fd8f36e6324d388e4d6e821811b
SHA128eabacb5a7f111d74cfa0905873e56037e20272
SHA256b2fbe22f0395ffae9563851d6b78fe3e039e083481164122fb309c622906e8c2
SHA512e5af7c7a291b6ce8405942a3be626037fcf9fd425b7995d2b19314f4beeb0e2caf9266a5bda163845923687a3cc2d75dde17d9ca70091acb4ddc3265ce4253af
-
Filesize
872KB
MD5c56b5f0201a3b3de53e561fe76912bfd
SHA12a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.7MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.7MB
-
Filesize
1.5MB
-
Filesize
1.7MB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
892KB