Analysis
-
max time kernel
141s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
10-07-2024 21:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe
-
Size
279.1MB
-
MD5
0be03dfce8ee7ee5632c2fe8a9472a05
-
SHA1
7de8345236cec31bf7757a88e3817b4f3dfa2d2d
-
SHA256
6b8aec3a0281d311fae9585c9d7b6027eaac42972e67583789b8f27c8dfeebb4
-
SHA512
9579da530be773b5671441ad513e5a89e33026bbbc3d474a9555394eaffccf5426de2c1d596a0cdb4210a1aba1a20544e50ca6cdd5b701d4a1602b5adc709aff
-
SSDEEP
6291456:QxZWwcRITDiqw9K10PCPOM64chiocQZl9gCty9QP5kzv28kRuU:czcRITDC9KFPOpvhiocQf+ehkKUU
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ESN\NinjaBruce_Formal.esn Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ITA\Batman_BmPristine.ita Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\POR\Batman_FVR.por Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\DLC\257070\CommunityPatch\FEChar_CPJKR_ArkhamJokerThg_SF.upk Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\DLC\257070\CommunityPatch\Playable_DeathStroke_Prisoner_SF.upk Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\INT\Batman_LibertyFile.int Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\RUS\Batman_BmRebirth.rus Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\FRA\CPJKR_BAC.fra Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\DLC\257070\CommunityPatch\FEChar_Batman_Flash_Point_SF.upk Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\INT\Batman_BatmanM89.int Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ESM\NinjaBruce_Training.esm Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ESN\Batman_JustLrds.esn Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ESN\NinjaBruce_YNG.esn Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\FRA\Batman_BmPristine.fra Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\INT\Batman_B2005Movie.int Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ESM\Batman_BmVampire.esm Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\FRA\NinjaBruce_Formal.Fra Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\POL\Batman_BmPristine.Pol Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\RUS\Batman_B2005Movie.rus Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\DLC\257070\CommunityPatch\Playable_Batman_EEB_SF.upk Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\INT\CPJKR_BlackMask.int Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\POL\Batman_BmRebirth.Pol Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\DLC\257070\BmInput.ini Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\CookedPCConsole\OldGotham_A7.upk Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\DEU\Batman_2016_Bat.deu Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\DEU\Batman_BewareTB.deu Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ESM\NinjaBruce_YNG.esm Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ESN\Batman_Flash_Point.esn Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\DLC\257070\CommunityPatch\Playable_Batman_LibertyFile_SF.upk Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\DLC\257070\CommunityPatch\Playable_CPJKR_BlackMask_SF.upk Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ESM\Batman_Return.esm Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ITA\Batman_BmVampire.ita Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\POL\Batman_BewareTB.Pol Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\POL\Batman_JustLrds.Pol Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\DLC\257070\CommunityPatch\FEChar_Batman_B2008Movie_SF.upk Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\INT\B2005Movie.int Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ITA\Batman_BmRebirth.ita Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\POL\Batman_FVR.Pol Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\RUS\Batman_BewareTB.rus Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\DLC\257070\CommunityPatch\Playable_Batman_Batfleck2017_SF.upk Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\DEU\Batman_B2008Movie.deu Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\INT\Batman_BmPristine.int Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\POL\Batman_B2005Movie.Pol Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\POR\NinjaBruce_Formal.POR Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ESM\Batman_JustLrds.esm Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\FRA\Batman_JustLrds.fra Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\INT\Batman_BewareTB.int Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\INT\Batman_FVR.int Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\RUS\CPJKR_Pho.rus Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ESM\CPJKR_OriRedHood.esm Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\FRA\CPJKR_ArkhamJokerThg.fra Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\POL\Batman_Return.Pol Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\POR\CPJKR_BlackMask.POR Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\POR\CPJKR_OriRedHood.POR Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\DLC\257070\CommunityPatch\Playable_Deathstroke_Unmasked_SF.upk Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\DEU\Batman_BmVampire.deu Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ESM\Batman_BatmanM89.esm Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\ESM\CPJKR_BlackMask.esm Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\FRA\Batman_ArkhamCity.FRA Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\DEU\Batman_B2005Movie.deu Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\FRA\CPJKR_BlackMask.Fra Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\POL\Batman_BmVampire.Pol Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\BMGame\Localization\RUS\Batman_Flash_Point.rus Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe File created C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\DLC\257070\CommunityPatch\FEChar_Batman_DarkKnight_SF.upk Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2984 Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe"C:\Users\Admin\AppData\Local\Temp\Arkham Origins Community Patch - Setup Version-137-V2-9-1711907934.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of FindShellTrayWindow
PID:2984
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:768