Analysis
-
max time kernel
161s -
max time network
160s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
06-09-2022 18:01
Behavioral task
behavioral1
Sample
Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe
Resource
win7-20220812-en
windows7-x64
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
11 signatures
300 seconds
General
-
Target
Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe
-
Size
1.1MB
-
MD5
de44a278d7ea31a7440eb7b1ed1e6901
-
SHA1
e2329c7f0d1d7b4c09bbec01046fe9d27981248f
-
SHA256
9cf79bf9432b834bd3ed1cf7b412c773ec06e631685a5b32e245a6e0779b66d9
-
SHA512
67e9a94a8c5cf459b935f413c6183fa64bab9dddb3a37c95b6f5dc507922fa7fecb3f0408b60a3e2ae148b627ba0317d42aa0e4a691211ad2f394e6e37d7235d
-
SSDEEP
24576:7lCfiVBWpedi288WnNilhBJhpwHAn7bJ7xDSmio:EiVBWgdB8zYlhF2HU7V7/
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1508 Grounded Early Access Plus 18 Trainer Updated 2021.10.25.exe