59f0c094091505062f443e72c7f20faea6333de746cd2bcdf7b2616970b02f26 | Triage

Analysis

max time kernel
149s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 23:33

Sharing

Report Analysis Logs

General

Target

Steam cheat engine/Files cheat/Steam FPS.exe
Size

522KB
MD5

2a5f797b5be5c04ca0a3e2105ee0af9b
SHA1

303ed698464b348905c69fe3d3e7cbe730034707
SHA256

b7ddfb1d8c5bc8b7cd1652d31bb84702feb701399ea3c22de57691af0a5ee01a
SHA512

e00bd3db7c6a26ecef1a25e121ac86f780cc8855446f65a2fa23041b3b470376541c8496c3cefb7d02092a31db13c29f1251fdd7509c018db0f574437dc34410
SSDEEP

12288:pKOjJsDc2+WC+D+4H/xeGofENaTSuGCC709j:pKyacgDD+4fwG1NaTSw

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe
1872	Steam FPS.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1872	Steam FPS.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
1872	Steam FPS.exe

C:\Users\Admin\AppData\Local\Temp\Steam cheat engine\Files cheat\Steam FPS.exe
"C:\Users\Admin\AppData\Local\Temp\Steam cheat engine\Files cheat\Steam FPS.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads