Analysis
-
max time kernel
131s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
25-05-2024 21:23
General
-
Target
$TEMP/SDM143/Free Ride Games.exe
-
Size
504KB
-
MD5
23cad4075e1fd5d47c0434fef549efde
-
SHA1
d7cdc7cb933466474986ae37fc7ebefdad601aaf
-
SHA256
18f4519d20252bf579b887adec25554ac412bd79604547cca12f9f589549f952
-
SHA512
e4176411caac89db8dd073f2b47b7970168dacad4cdecc6edae310591e279149430b10ab1f956a7722ab22677ca893bfc4eb3fe17009b9b73a95e288c12c89b1
-
SSDEEP
12288:0obl5KiSHoYxGZ2YI7jjN3iR4S/RQq4jrY+vyRPZbN7yTMhHoSKU:/bzKLHoV1wpwxZRsrY7RJATMP
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\SDM143\Free Ride Games.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\SDM143\Free Ride Games.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1944-0-0x0000000000400000-0x0000000000553000-memory.dmpFilesize
1.3MB
-
memory/1944-3-0x0000000000400000-0x0000000000553000-memory.dmpFilesize
1.3MB