Analysis
-
max time kernel
1793s -
max time network
1565s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
12-07-2024 10:11
General
-
Target
Geometry Dash.rar
-
Size
187.6MB
-
MD5
cee4903fa492beaffd7d73b0ade93beb
-
SHA1
3026927c470de783eb369199dd63510d62a8b748
-
SHA256
fdca31d917022c94f32a0194f558db3bad4e89874f316b61950d670bdf0deff0
-
SHA512
63690af2314dd1297bfdf215b0e0d7ee12b45842e82b322f7333956d0e8e18809af4b893863f4b4cc51f8379241ef353bc47c722e5676bca40497d182e0c892d
-
SSDEEP
3145728:xEznNs3enIOLBwQFbjcCT2RzkdTBBDlSKJUqrtkw/KKaMO432MOavo2bFibH6vAt:xES3KDLOyqxgF9lSKJJpkXn43VOaw2hi
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 64 IoCs
-
Suspicious use of SendNotifyMessage 64 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 9 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Geometry Dash.rar"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\Geometry Dash.rar2⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\Geometry Dash.rar3⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Geometry Dash.rar"4⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5bfaa5053ad423637e8e4cd9b0acccb60
SHA16f46e6a4bce73f2cdfc11198fae7d4461e927ddc
SHA2565df64b2c5aef49494ecc541147afc11b9353bd72a736c94a5a16cf28fcb37749
SHA5125fa708d6610d3406fdd842d43f3066eb12c1ec7247468409a045ed29092a27d4b965df26777a13d02a8acb2c21f87241a84f8781c15b08965f2e4ee59008e81b
-
Filesize
1KB
MD58438bfeb0d69042f595e37e1322976cf
SHA154f3fc756b1dad7a91cdcce6c50fec54f5970965
SHA25626cebd6fcf47500c5a67a5ae322bd0565b056274b79df15c949d117030583ad7
SHA5120e7352f9908d6c3f107de11677e991d67d42f4ebf3fbfd31db7f1716e40ef3edda90218824fead362ed3791998272a38c44c9c8824b2f51be001bba596f43449
-
Filesize
3KB
MD56b33d6da9bb29070a3e7c2895a12fff8
SHA1d27ba5b7c22108f8f19d0996f609a5be3eae2b3c
SHA2562806c75ef3ac7931f6766fb690b8eae073df5d6ddb5ab752b59bba4b1eeab79f
SHA51276386f536fbeae928a70bff917c1b6a7690ff5fece0317a33bab2b8de78629147e4375ad27e3c19a0ba51d82362f85128377779d8c364c43f1e4885613d03417
-
Filesize
3KB
MD546f93db19d9ca8c44e590ce371116b58
SHA1153fc808eacb10537565b9e4c676925e5e0d8ddb
SHA2567656a5e98ee78eb7d7140946988ae92bbd5708166e30cad11e7e5cdcd90bdf44
SHA5128ba60edc41f0698b4d9eb0912d16677f70d1dde1c0b1c8f83e4a433a8d922327d949d3d508abcab61910b265c1f302bb60645f6b0e94cc98d6cd49b2eee44acc
-
Filesize
3KB
MD582a6d751a218422a26711fb75d1f5c93
SHA15d6c7a6b9fc305809a065f0ce9e82e2941720053
SHA25682e6b9c2d10f518ddddbf3272c5338f2811d89776581df80711796e9b9e32040
SHA512b9cf808a85c75ded1c2f88185bb85e46f1bbc8509be92abca889892dba7a33f370170a822685a424e706b170cbc22c8bebf5845d1bf39c2db75079ff3e136403
-
Filesize
18B
MD5bc4d1d2452253edcd23f78b2c9b472bc
SHA15d466fe1535504704fa53eafd2807a0b0b226d7e
SHA256a9acf25808d20bfe5c619656dc67b55c128c7ec2846194074c33314e0aaba855
SHA512fe882e925dfaeea88a4b032f950842cdd64835df610f5b371c36e2adc4196c39b8d0c362268e21796e9aacacef33b20d3eb553a1b91fc089d0f223bd9ce1cc46
-
Filesize
80KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
116KB
-
Filesize
92KB
-
Filesize
68KB
-
Filesize
92KB
-
Filesize
2.7MB
-
Filesize
96KB
-
Filesize
80KB
-
Filesize
92KB
-
Filesize
68KB
-
Filesize
72KB
-
Filesize
68KB
-
Filesize
140KB
-
Filesize
96KB
-
Filesize
144KB
-
Filesize
160KB
-
Filesize
348KB
-
Filesize
80KB
-
Filesize
308KB
-
Filesize
264KB
-
Filesize
72KB
-
Filesize
1.4MB
-
Filesize
2.0MB
-
Filesize
68KB
-
Filesize
176KB
-
Filesize
208KB
-
Filesize
84KB
-
Filesize
96KB
-
Filesize
992KB
-
Filesize
2.0MB
-
Filesize
72KB
-
Filesize
2.3MB
-
Filesize
76KB
-
Filesize
788KB
-
Filesize
68KB
-
Filesize
76KB
-
Filesize
188KB
-
Filesize
1.1MB
-
Filesize
348KB
-
Filesize
68KB
-
Filesize
72KB
-
Filesize
168KB
-
Filesize
88KB
-
Filesize
96KB
-
Filesize
72KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
16.7MB
-
Filesize
68KB
-
Filesize
496KB
-
Filesize
412KB
-
Filesize
192KB
-
Filesize
96KB
-
Filesize
68KB
-
Filesize
108KB
-
Filesize
68KB
-
Filesize
120KB
-
Filesize
68KB
-
Filesize
92KB
-
Filesize
132KB
-
Filesize
260KB