Analysis

  • max time kernel
    131s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-05-2024 21:23

General

  • Target

    $TEMP/SDM143/Free Ride Games.exe

  • Size

    504KB

  • MD5

    23cad4075e1fd5d47c0434fef549efde

  • SHA1

    d7cdc7cb933466474986ae37fc7ebefdad601aaf

  • SHA256

    18f4519d20252bf579b887adec25554ac412bd79604547cca12f9f589549f952

  • SHA512

    e4176411caac89db8dd073f2b47b7970168dacad4cdecc6edae310591e279149430b10ab1f956a7722ab22677ca893bfc4eb3fe17009b9b73a95e288c12c89b1

  • SSDEEP

    12288:0obl5KiSHoYxGZ2YI7jjN3iR4S/RQq4jrY+vyRPZbN7yTMhHoSKU:/bzKLHoV1wpwxZRsrY7RJATMP

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\SDM143\Free Ride Games.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\SDM143\Free Ride Games.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1944-0-0x0000000000400000-0x0000000000553000-memory.dmp

    Filesize

    1.3MB

  • memory/1944-3-0x0000000000400000-0x0000000000553000-memory.dmp

    Filesize

    1.3MB