Analysis
-
max time kernel
151s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-es -
resource tags
arch:x64arch:x86image:win10v2004-20230221-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
09/03/2023, 06:13
Behavioral task
behavioral1
Sample
Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe
Resource
win7-20230220-es
Behavioral task
behavioral2
Sample
Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe
Resource
win10v2004-20230221-es
General
-
Target
Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe
-
Size
1.5MB
-
MD5
b920d1f385d3e91ffb80e6ab74b9a3df
-
SHA1
e9e9c1896594054bac1c0718086b402971ac146c
-
SHA256
e9f87b83554979f5c489cac4c42b3c92a58f9090d87746c21b3fc662b8bf52c2
-
SHA512
8f9e6b4b3e8f6f754d2abbb519056e11e90242885493599fc7ddcf2a7d4692c49ba26a3f4885ee3d5b857d937176c2adfa5cb0c1aea5cbc697eb011b207c7029
-
SSDEEP
24576:PjxM9j5qToXVYLt9nneX58cq6V+DGDSVXT5XfL6TwaNkya:o5qTMYZ1eycqk+LXT5XT+PW1
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1112 Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
29B
MD5100ad43a6e39d44013fad7f3aa343e3b
SHA1dc8050bdee8a74354cb4a2057e4e703e7a460943
SHA256a7b15ee77dd0db946e7fdbf574889bd30c23fa3d7bff6d509df118595ee14ec5
SHA51220f9b26416804f917d0642d35de32ccae0849c34bff4eb75c6450b1ee83756f3275850101d7482eb59c78356b1489c2d4db6cd95ae9b72b64d5eeab700d36ba8