Analysis
- max time kernel
150s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-fr - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-frlocale:fr-fros:windows11-ltsc_2024-x64systemwindows - submitted
14/07/2026, 22:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EA SPORTS UFC 5 Setup.exe
Resource
win10v2004-20260513-fr
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
EA SPORTS UFC 5 Setup.exe
Resource
win11ltsc2024-20260709-fr
7 signatures
150 seconds
General
- Target EA SPORTS UFC 5 Setup.exe
- Size 6.0MB
- Sample260714-2kcxpsez9j
- SHA256 008789d1102bae06dab9052666e8c61b4a5048bde3f802230886d8117ba634a5
- MD5 5ce23a4413c86bef135f8f5c68c3ed3c
- SHA1 41c772f574ddb4a363777eddd15f69bd6be3cbea
- SHA512 a20aa4e8efe625fb480661e8669c9da50f961b33b8e00b2276277133fbbb1916c52a931e7ca47ebc6024d90fa830d8a0a7f76f8c1152c42c9ebea956832e1d58
- SSDEEP 98304:nQdZXGiJAmw/3+t1S5jfb7rv2VpZNySr5ey82lAuP6AY3dc/MnXuZIw:nmZXGr1W05fWpBtey8sPyN3ynZZ
- TLSH T1A05633ADAE970E92D3E60F3400C1BE951AB10D239ADF510E76ED2C3C67BC67CAD24495
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 4632 EA SPORTS UFC 5 Setup.exe 4632 EA SPORTS UFC 5 Setup.exe 4632 EA SPORTS UFC 5 Setup.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language EA SPORTS UFC 5 Setup.exe - Modifies registry class 4 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ EA SPORTS UFC 5 Setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\ EA SPORTS UFC 5 Setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\ EA SPORTS UFC 5 Setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\ EA SPORTS UFC 5 Setup.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 4632 EA SPORTS UFC 5 Setup.exe 4632 EA SPORTS UFC 5 Setup.exe 4632 EA SPORTS UFC 5 Setup.exe 4632 EA SPORTS UFC 5 Setup.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4632 EA SPORTS UFC 5 Setup.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4632 EA SPORTS UFC 5 Setup.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\EA SPORTS UFC 5 Setup.exe"C:\Users\Admin\AppData\Local\Temp\EA SPORTS UFC 5 Setup.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4632
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\genteeDA\guig.dll
- Size 20KB
- SHA256 005c251c21d6a5ba1c3281e7b9f3b4f684d007e0c3486b34a545bb370d8420aa
- MD5 d3f8c0334c19198a109e44d074dac5fd
- SHA1 167716989a62b25e9fcf8e20d78e390a52e12077
- SHA512 9c890e0af5b20ce9db4284e726ec0b05b2a9f18b909fb8e595edf3348a8f0d07d5238d85446a09e72e4faa2e2875beb52742d312e5163f48df4072b982801b51
- SSDEEP 192:mxonubPh9zJCEvCZj6beDKnYFRJvS/QwC3:tubPh9N6N6k3z
- TLSH T16892F6B672D244F7D28B02F50E932F9E7B7999515B7438720E234BCE54A6541F83AA03
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\genteert.dll
- Size 60KB
- SHA256 54c0da1735bb1cb02b60c321de938488345f8d1d26bf389c8cb2acad5d01b831
- MD5 6ce814fd1ad7ae07a9e462c26b3a0f69
- SHA1 15f440c2a8498a4efe2d9ba0c6268fab4fb8e0a7
- SHA512 e5cff6bcb063635e5193209b94a9b2f5465f1c82394f23f50bd30bf0a2b117b209f5fca5aa10a7912a94ad88711dcd490aa528a7202f09490acd96cd640a3556
- SSDEEP 768:BVPbKk9022j0efXs6X8zqk3pT3oMapzxc7Ep+DnSIiacDwGpr1a:BVTK+022j0V6mqMozpzxcXOpwEr1
- TLSH T16A536D03678600F5D6526A7A342F7277FB34DFE742E6C6836F69DC902D221A1A52A1C3
- MD5 SHA1 SHA512 SSDEEP TLSH