952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
23/07/2024, 00:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
Size

303KB
MD5

6954bc1f40215ac69b671875c4c41e24
SHA1

3414b51b355b8215b825321608b2ae80fed2ae4c
SHA256

952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207
SHA512

ea1393c55999898111448e58f12540ac5c03d7faa9e72ab708c4e54780e6cc17690ed58db6428c0c17472115ca0d5a504ededee5c112a59149d6220c62cdcd94
SSDEEP

6144:uuq1yy/pjnkeatS+TC1+J51YUH9blP743AqGI:y1yc9ktbTC8XbN7e3

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/files/0x0007000000016dd5-5.dat	upx
behavioral1/memory/2988-0-0x0000000000400000-0x0000000000418000-memory.dmp	upx
behavioral1/memory/2988-14-0x0000000000400000-0x0000000000418000-memory.dmp	upx

Drops file in Windows directory 14 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\UT2004_cdfix.exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
File created	C:\Windows\win32dc\Silent Hill 4_fix.exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
File created	C:\Windows\win32dc\DAoC cdfix.exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
File created	C:\Windows\win32dc\Counter-Strike + hack.exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
File created	C:\Windows\win32dc\FlatOut(crack).exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
File created	C:\Windows\win32dc\Doom 3 cdfix.exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
File created	C:\Windows\win32dc\Doom 3 serial.exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
File created	C:\Windows\win32dc\FlatOut + nocd.exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike_cheat.exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike + hack.exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
File opened for modification	C:\Windows\win32dc\FlatOut + nocd.exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
File opened for modification	C:\Windows\win32dc\DAoC cdfix.exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
File created	C:\Windows\win32dc\Counter-Strike_cheat.exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
File created	C:\Windows\win32dc\Sims 2_patch.exe	952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe

C:\Users\Admin\AppData\Local\Temp\952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe
"C:\Users\Admin\AppData\Local\Temp\952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207.exe"
1⤵
- Drops file in Windows directory
PID:2988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\UT2004_cdfix.exe

Filesize
303KB

MD5
6954bc1f40215ac69b671875c4c41e24

SHA1
3414b51b355b8215b825321608b2ae80fed2ae4c

SHA256
952785c45611047a518dd6324f7690bddbe36f67e5e3344d9a801be16513b207

SHA512
ea1393c55999898111448e58f12540ac5c03d7faa9e72ab708c4e54780e6cc17690ed58db6428c0c17472115ca0d5a504ededee5c112a59149d6220c62cdcd94

Download Submit
memory/2988-0-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download
memory/2988-14-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads