Overview
overview
10Static
static
7Torrent Game.zip
windows11-21h2-x64
1Torrent Ga...ll.exe
windows11-21h2-x64
7Torrent Ga...up.exe
windows11-21h2-x64
10Torrent Ga...a0.exe
windows11-21h2-x64
1Torrent Ga...a1.exe
windows11-21h2-x64
3Torrent Ga...a2.bin
windows11-21h2-x64
3Torrent Ga...a3.bin
windows11-21h2-x64
3Torrent Ga...a4.bin
windows11-21h2-x64
3Torrent Ga...a5.bin
windows11-21h2-x64
3Analysis
-
max time kernel
142s -
max time network
168s -
platform
windows11-21h2_x64 -
resource
win11-20240419-en -
resource tags
arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system -
submitted
30-04-2024 08:50
Behavioral task
behavioral1
Sample
Torrent Game.zip
Resource
win11-20240426-en
Behavioral task
behavioral2
Sample
Torrent Game/GameInstall.exe
Resource
win11-20240426-en
Behavioral task
behavioral3
Sample
Torrent Game/Setup.exe
Resource
win11-20240419-en
Behavioral task
behavioral4
Sample
Torrent Game/data0.exe
Resource
win11-20240419-en
Behavioral task
behavioral5
Sample
Torrent Game/data1.exe
Resource
win11-20240419-en
Behavioral task
behavioral6
Sample
Torrent Game/data2.bin
Resource
win11-20240419-en
Behavioral task
behavioral7
Sample
Torrent Game/data3.bin
Resource
win11-20240419-en
Behavioral task
behavioral8
Sample
Torrent Game/data4.bin
Resource
win11-20240426-en
Behavioral task
behavioral9
Sample
Torrent Game/data5.bin
Resource
win11-20240419-en
General
-
Target
Torrent Game/data5.bin
-
Size
82.4MB
-
MD5
e047d03be43d9cf8a37c59727c9c0055
-
SHA1
746c7ae41d13d168c28c97ffa5a83f4bf300918b
-
SHA256
4e124a5134889b7d88a8ce9fd4c5c2efa37d4d408716acd39a112e3f60c090b1
-
SHA512
aef8e3f55522cdb2ab16f3d6442f24386f81277b460dcbe64d219a5d216f0d063a26c4bd7f0b3a19cbe2f8d36e4f3d93547fe1d3c7b2c4c9b6602d54ac49e7c4
-
SSDEEP
1572864:oJxA9NA6L9/IMMw6LIMf1/2t5/aP4jHnur:oJQA6LVIc6Lhf1/85/uKHnur
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-293923083-2364846840-4256557006-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-293923083-2364846840-4256557006-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4500 OpenWith.exe