Resubmissions

10-02-2023 16:09

230210-tl8rrshf92 10

10-02-2023 16:01

230210-tgqqdshd57 10

Analysis

  • max time kernel
    74s
  • max time network
    86s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-02-2023 16:01

General

  • Target

    Dragon Ball Z Kakarot v1.03-v1.60 Plus 32 Trainer.exe

  • Size

    1.3MB

  • MD5

    5976447d2d9d6aca7e3df4bc0d27bfe7

  • SHA1

    0a137d372e3123713f7c690fa2831de162ae69c8

  • SHA256

    a9ac519ca396e0878eb15b11d7c697bc175f380b00162f4cb351239353747d3a

  • SHA512

    6eca409e1053b23f3affc9d2d7f562ddae0c60de55183ae82b1098c896f7d1b48fa12ed39c96b0f4ca8a06ddd7aae22dbd2003b2389793a702d32528afeefa87

  • SSDEEP

    24576:NkwWyiqAVWAvGNYn3rJ4FJXFtspAyji8GbJ7NDSIWC1:LuVuOnN4oALFV7bWC1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Dragon Ball Z Kakarot v1.03-v1.60 Plus 32 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\Dragon Ball Z Kakarot v1.03-v1.60 Plus 32 Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/440-132-0x00007FF8D0450000-0x00007FF8D0F11000-memory.dmp

    Filesize

    10.8MB

  • memory/440-133-0x00000213CBAEA000-0x00000213CBAEF000-memory.dmp

    Filesize

    20KB

  • memory/440-134-0x00000213D1FF0000-0x00000213D1FF3000-memory.dmp

    Filesize

    12KB

  • memory/440-135-0x00007FF8D0450000-0x00007FF8D0F11000-memory.dmp

    Filesize

    10.8MB

  • memory/440-136-0x00000213CBAEA000-0x00000213CBAEF000-memory.dmp

    Filesize

    20KB