d7a14d28e816e746762905e28d50c3a1071761002487de02a424672fc97b66af

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
04-12-2024 02:27

Target

Free fn cheat.exe
Size

7.5MB
MD5

4bef12cf7fe466637953e74344f8baad
SHA1

d492021ef4a9988ba076fd894703f54e19d7a210
SHA256

c719daf48013564b6692e2ee4ca7c05688b17945bd856c052e097e2e2a8e527c
SHA512

4e8280b6ea3d5cebd0a0892fd4654e8fc3ab4894aee952448ee21417f146cf4d5c578b9b97747d37e32ad8d9b82cb113f09ab6da0df190f1bd7504851eda1215
SSDEEP

196608:3hQCwV2urErvI9pWjgN3ZdahF0pbH1AY7WtQsNo/03vC18:GV2urEUWjqeWx06rYY8

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2204	Free fn cheat.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x00050000000194ae-21.dat	upx
behavioral1/memory/2204-23-0x000007FEF5840000-0x000007FEF5F04000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1160 wrote to memory of 2204	1160	Free fn cheat.exe	31
PID 1160 wrote to memory of 2204	1160	Free fn cheat.exe	31
PID 1160 wrote to memory of 2204	1160	Free fn cheat.exe	31

C:\Users\Admin\AppData\Local\Temp\Free fn cheat.exe
"C:\Users\Admin\AppData\Local\Temp\Free fn cheat.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1160
- C:\Users\Admin\AppData\Local\Temp\Free fn cheat.exe
  "C:\Users\Admin\AppData\Local\Temp\Free fn cheat.exe"
  2⤵
  - Loads dropped DLL
  PID:2204

C:\Users\Admin\AppData\Local\Temp\_MEI11602\python312.dll

Filesize
1.7MB

MD5
18677d48ba556e529b73d6e60afaf812

SHA1
68f93ed1e3425432ac639a8f0911c144f1d4c986

SHA256
8e2c03e1ee5068c16e61d3037a10371f2e9613221a165150008bef04474a8af8

SHA512
a843ab3a180684c4f5cae0240da19291e7ed9ae675c9356334386397561c527ab728d73767459350fa67624f389411d03665f69637c5f5c268011d1b103d0b02

Download Submit
memory/2204-23-0x000007FEF5840000-0x000007FEF5F04000-memory.dmp

Filesize
6.8MB

Download