Overview

overview

1

Static

static

Devil May ...er.exe

windows7-x64

1

Devil May ...er.exe

windows10-2004-x64

1

Resubmissions

02/01/2023, 13:28

230102-qqyktaed88 1

Analysis

  • max time kernel
    139s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    02/01/2023, 13:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Devil May Cry 2 HD v1.0 Plus 11 Trainer.exe

  • Size

    1.1MB

  • MD5

    bdbf9d885d25766759d91d8eae1a6b70

  • SHA1

    752691509e9ef4636b9c74d016ec4d20ead55659

  • SHA256

    24d80e4e17ead4f0e7fd360ae56c81154d0a6eee08a6318cf5c709438be0fe22

  • SHA512

    1df5afaddec5c185b13fe1f2c24c13b721b412921bd0f0a09791a51eb54d10db09f6d428da07616e455a75e044788a1aa69b314e010489842256a6456f1bff2a

  • SSDEEP

    12288:nSJJxjeErows4h/a47T+4dtJC4C2pr+9+iExlaJPc84fYiLbm98jz0J7n09J+J01:Wj1owfaJX4R/4JsA0FxDSNYlhJTg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Devil May Cry 2 HD v1.0 Plus 11 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\Devil May Cry 2 HD v1.0 Plus 11 Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:2008
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x1a4
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2008-54-0x000007FEFBB11000-0x000007FEFBB13000-memory.dmp

    Filesize

    8KB

    Download