545f156d03870077adfe4d24b7464edbaa85ce6d682bb1a96e668761c478dfc0

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
24-11-2024 16:51

Target

RyzenCheats.exe
Size

6.8MB
MD5

1e8aa3040cfe04f61dd80d6085fbe0ae
SHA1

9a0cfa008db1c20635120c38f2f4303c8db370f3
SHA256

545f156d03870077adfe4d24b7464edbaa85ce6d682bb1a96e668761c478dfc0
SHA512

58a01b076c149650fb6230b1d64d1c095d8b3d79b2c56d5c9b57d40db3a14105f3d9fdece6c05b08f4322fc80ea90d7bcdaae25b9cafcafb1939edc938bed5c2
SSDEEP

98304:b0zdbM+Q2y+aq0NsjOjFgFQlwq4Mjk+dBZtu9xTtwz/aer6/BbCEJ1nL2hBnLnC6:bif0gOjmFQR4MVGFtwLPsnL2hVp3

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2848	RyzenCheats.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x0006000000018f53-21.dat	upx
behavioral1/memory/2848-23-0x000007FEF57F0000-0x000007FEF5DD9000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2796 wrote to memory of 2848	2796	RyzenCheats.exe	31
PID 2796 wrote to memory of 2848	2796	RyzenCheats.exe	31
PID 2796 wrote to memory of 2848	2796	RyzenCheats.exe	31

C:\Users\Admin\AppData\Local\Temp\RyzenCheats.exe
"C:\Users\Admin\AppData\Local\Temp\RyzenCheats.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2796
- C:\Users\Admin\AppData\Local\Temp\RyzenCheats.exe
  "C:\Users\Admin\AppData\Local\Temp\RyzenCheats.exe"
  2⤵
  - Loads dropped DLL
  PID:2848

C:\Users\Admin\AppData\Local\Temp\_MEI27962\python311.dll

Filesize
1.6MB

MD5
9e985651962ccbccdf5220f6617b444f

SHA1
9238853fe1cff8a49c2c801644d6aa57ed1fe4d2

SHA256
3373ee171db8898c83711ec5067895426421c44f1be29af96efe00c48555472e

SHA512
8b8e68bbe71dcd928dbe380fe1a839538e7b8747733ba2fd3d421ba8d280a11ba111b7e8322c14214d5986af9c52ab0c75288bbb2a8b55612fb45836c56ddc36

Download Submit
memory/2848-23-0x000007FEF57F0000-0x000007FEF5DD9000-memory.dmp

Filesize
5.9MB

Download