a0675a077c4a183c77409b1f319e2f918474a866ca7cafa746115dbe11edd18f

Analysis

max time kernel
1798s
max time network
1561s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
04/05/2024, 15:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

jqgCɏ̎qi̌Łj/MyGame.exe
Size

11.6MB
MD5

c698cc54f474495b230864e5cf298149
SHA1

4d725ec93d7955936fb65ea341ed0e055a5a7f66
SHA256

e3fbee73792b5beeb3b8f73753d29c36c7a1c7642e480ff53e42df076ad5518f
SHA512

d8234c4fe28f4cdd2bc38b23cb576e6f9af8fffca33ce1eb5ad14d9f47d1fc697b026cc7aa0a9f78d74315ae0b8bc3a6a722509d8d81bdd5ec9e3278b48d61d0
SSDEEP

196608:Fi2JAIwKg+nz17NYvg+BTwrzYLwqwBhmCxb+oWl1UvSWzq6v+jlRHYNy4bQcw09Z:FiaD3zJoTw/Y0csbPWlWvjxglRHY7QnW

Score

6^/10

Malware Config

Signatures

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\T:	MyGame.exe
File opened (read-only)	\??\X:	MyGame.exe
File opened (read-only)	\??\I:	MyGame.exe
File opened (read-only)	\??\M:	MyGame.exe
File opened (read-only)	\??\O:	MyGame.exe
File opened (read-only)	\??\V:	MyGame.exe
File opened (read-only)	\??\Y:	MyGame.exe
File opened (read-only)	\??\Z:	MyGame.exe
File opened (read-only)	\??\A:	MyGame.exe
File opened (read-only)	\??\B:	MyGame.exe
File opened (read-only)	\??\G:	MyGame.exe
File opened (read-only)	\??\K:	MyGame.exe
File opened (read-only)	\??\L:	MyGame.exe
File opened (read-only)	\??\N:	MyGame.exe
File opened (read-only)	\??\P:	MyGame.exe
File opened (read-only)	\??\R:	MyGame.exe
File opened (read-only)	\??\U:	MyGame.exe
File opened (read-only)	\??\W:	MyGame.exe
File opened (read-only)	\??\E:	MyGame.exe
File opened (read-only)	\??\H:	MyGame.exe
File opened (read-only)	\??\J:	MyGame.exe
File opened (read-only)	\??\Q:	MyGame.exe
File opened (read-only)	\??\S:	MyGame.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2156	MyGame.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2156	MyGame.exe
2156	MyGame.exe
2156	MyGame.exe

C:\Users\Admin\AppData\Local\Temp\jqgCɏ̎qi̌Łj\MyGame.exe
"C:\Users\Admin\AppData\Local\Temp\jqgCɏ̎qi̌Łj\MyGame.exe"
1⤵
- Enumerates connected drives
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2156

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2156-0-0x0000000000410000-0x0000000000411000-memory.dmp

Filesize
4KB

Download
memory/2156-1-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-2-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-3-0x0000000000410000-0x0000000000411000-memory.dmp

Filesize
4KB

Download
memory/2156-4-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-5-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-6-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-7-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-8-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-9-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-10-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-11-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-12-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-13-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-14-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-15-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-16-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-17-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-18-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-19-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-20-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-21-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-22-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-23-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-24-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-25-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-26-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-27-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-28-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-29-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-30-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-31-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-32-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-33-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-34-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-35-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-36-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-37-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-38-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-39-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-40-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-41-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-42-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-43-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-44-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-45-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-46-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-47-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-48-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-49-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-50-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-51-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-52-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-53-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-54-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-55-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-56-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-57-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-58-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-59-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-60-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-61-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-62-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-63-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-64-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download
memory/2156-65-0x0000000000010000-0x00000000001E9000-memory.dmp

Filesize
1.8MB

Download