Overview

overview

6

Static

static

3

FiveModsSetup.exe

windows7-x64

5

FiveModsSetup.exe

windows10-2004-x64

6

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

FiveMods.exe

windows7-x64

1

FiveMods.exe

windows10-2004-x64

6

LICENSES.c...m.html

windows7-x64

3

LICENSES.c...m.html

windows10-2004-x64

3

resources/...dex.js

windows7-x64

3

resources/...dex.js

windows10-2004-x64

3

resources/...owl.js

windows7-x64

3

resources/...owl.js

windows10-2004-x64

3

resources/...ils.js

windows7-x64

3

resources/...ils.js

windows10-2004-x64

3

resources/...oon.js

windows7-x64

3

resources/...oon.js

windows10-2004-x64

3

resources/...owl.js

windows7-x64

3

resources/...owl.js

windows10-2004-x64

3

resources/...ter.js

windows7-x64

3

resources/...ter.js

windows10-2004-x64

3

resources/...end.js

windows7-x64

3

resources/...end.js

windows10-2004-x64

3

resources/...ter.js

windows7-x64

3

resources/...ter.js

windows10-2004-x64

3

resources/...tifier

macos-10.15-amd64

4

resources/...nt.rtf

windows7-x64

4

Analysis

  • max time kernel
    78s
  • max time network
    102s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    08-08-2024 03:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    FiveMods.exe

  • Size

    158.2MB

  • MD5

    e12c45583ac31a8afa96f24063171a26

  • SHA1

    8f8c78887d588c26157db83d0bb134e65031360e

  • SHA256

    66a71009df713a4c8bbb16f0b8df41c8de5a65ec49e06b18d43f5deac89abe0b

  • SHA512

    953d104507dd89a1c108137d724f9cb59be408912ceaeea45fb4b42ff62065825b85305eed00c9eafcd192df73c8253add305488feb0e3bfc9ae69e1130d9b1d

  • SSDEEP

    1572864:ybVZx8PLGKEULTQ9hm/C1tdUKYjgTwFoKnRQwsu/YfWXV/NiisGItlAdgAnEk0Hj:pvCqSkRmj

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\FiveMods.exe
    "C:\Users\Admin\AppData\Local\Temp\FiveMods.exe"
    1⤵
      PID:2808
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1160 --field-trial-handle=996,i,14515495742404345512,54515943621865357,131072 /prefetch:2
      1⤵
        PID:1752
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1512 --field-trial-handle=996,i,14515495742404345512,54515943621865357,131072 /prefetch:8
        1⤵
          PID:552
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1596 --field-trial-handle=996,i,14515495742404345512,54515943621865357,131072 /prefetch:8
          1⤵
            PID:1300
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --mojo-platform-channel-handle=2292 --field-trial-handle=996,i,14515495742404345512,54515943621865357,131072 /prefetch:1
            1⤵
              PID:1612
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --mojo-platform-channel-handle=2300 --field-trial-handle=996,i,14515495742404345512,54515943621865357,131072 /prefetch:1
              1⤵
                PID:1132
              • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                1⤵
                  PID:672
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1476 --field-trial-handle=996,i,14515495742404345512,54515943621865357,131072 /prefetch:2
                  1⤵
                    PID:1740
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --mojo-platform-channel-handle=3204 --field-trial-handle=996,i,14515495742404345512,54515943621865357,131072 /prefetch:1
                    1⤵
                      PID:916
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3820 --field-trial-handle=996,i,14515495742404345512,54515943621865357,131072 /prefetch:8
                      1⤵
                        PID:1852
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=10 --mojo-platform-channel-handle=3956 --field-trial-handle=996,i,14515495742404345512,54515943621865357,131072 /prefetch:1
                        1⤵
                          PID:700
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=11 --mojo-platform-channel-handle=2080 --field-trial-handle=996,i,14515495742404345512,54515943621865357,131072 /prefetch:1
                          1⤵
                            PID:1356
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --mojo-platform-channel-handle=1068 --field-trial-handle=996,i,14515495742404345512,54515943621865357,131072 /prefetch:1
                            1⤵
                              PID:1704
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --mojo-platform-channel-handle=3368 --field-trial-handle=996,i,14515495742404345512,54515943621865357,131072 /prefetch:1
                              1⤵
                                PID:544
                              • C:\Windows\explorer.exe
                                "C:\Windows\explorer.exe"
                                1⤵
                                  PID:1760

                                Network

                                MITRE ATT&CK Matrix

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001
                                  Filesize

                                  210KB

                                  MD5

                                  48d2860dd3168b6f06a4f27c6791bcaa

                                  SHA1

                                  f5f803efed91cd45a36c3d6acdffaaf0e863bf8c

                                  SHA256

                                  04d7bf7a6586ef00516bdb3f7b96c65e0b9c6b940f4b145121ed00f6116bbb77

                                  SHA512

                                  172da615b5b97a0c17f80ddd8d7406e278cd26afd1eb45a052cde0cb55b92febe49773b1e02cf9e9adca2f34abbaa6d7b83eaad4e08c828ef4bf26f23b95584e

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000002
                                  Filesize

                                  24KB

                                  MD5

                                  c594a826934b9505d591d0f7a7df80b7

                                  SHA1

                                  c04b8637e686f71f3fc46a29a86346ba9b04ae18

                                  SHA256

                                  e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610

                                  SHA512

                                  04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                  Filesize

                                  363B

                                  MD5

                                  03bf3281f5b1fa6378e2f931d10ce606

                                  SHA1

                                  dd40d6a819c54cc9f34f06e6c6158f694fe56b48

                                  SHA256

                                  20d605323748f8a4a81061c0c4adcd3d111b1f23052897b9d958240d33f16022

                                  SHA512

                                  ce841c7bd51d451407d34a074cd821954d49e2a5b0434d0e350113bfc71ada1fbe4801fffab040238cb2cac1540e6a54e5b8f2a86f517fa4d0cd2470f0f63bb4

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                  Filesize

                                  363B

                                  MD5

                                  6d89cb676afceb15fade4b65e2a41a92

                                  SHA1

                                  afb29c1dfe715e819405d99e4cd658758b83a938

                                  SHA256

                                  91a9dfeb6695ff5859eee406999da51dc3eda4dbafff62030c7db140b8be385e

                                  SHA512

                                  4760aa7b97e62b4091736c41630efba3aac8acb2b9900ae403b1f8e9bec9f2b4e7e2c45844baa1f01d9990bfcf18a6c7d3f1e9541fd4bc82f12f737e31e852b6

                                  Download Submit