ea9838d9488c2e216aa4796f04fbf4862287d960808b9231c0755af4f6e52dc1

Analysis

max time kernel
93s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
11/07/2024, 13:11

Target

GameDirector.exe
Size

1.5MB
MD5

90daae1e1adc3d1b04be839299d8b714
SHA1

4d57848a07b85f251d85d677fc9b9dbf6e00fa25
SHA256

c669b98777ec24bc5c057201eb341d48a1f1fe8784c485bcecc3ec88fb4a835e
SHA512

892a5e689c53ff2df9bcf90ed443495c6fa428eade7aada4f5f1fa03bdb71e527c94438fa04c390dda47ae6868fa5f7496e3cc94e258ca8aa6611f61b8541211
SSDEEP

24576:lO39erq3wOkhCTksZDGc727O/oU38B2qyAwYPKDyTvsHtnsw5SKgg6KO9t:0tYaBTksZSMyfXCDyIHtnsY6nz

Score

1^/10

Modifies registry class 10 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\8BallClub\ = "8BallClub Saved Games"	GameDirector.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.8bc	GameDirector.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\8BallClub	GameDirector.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\8BallClub\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\GameDirector.exe\""	GameDirector.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\8BallClub\shell\open\command	GameDirector.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\8BallClub\shell	GameDirector.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\8BallClub\shell\open	GameDirector.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\8BallClub\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\GameDirector.exe\" /play \"%1\""	GameDirector.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.8bc\ = "8BallClub"	GameDirector.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\8BallClub\DefaultIcon	GameDirector.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2204	GameDirector.exe
2204	GameDirector.exe