Analysis
- max time kernel
75s - max time network
127s - platform
windows10-2004_x64 - resource
win10v2004-20230621-en - resource tags
- submitted
02/07/2023, 21:29
General
- Target Monster Hunter World v20200109-v20210602 Plus 67 Trainer.exe
- Size 1.6MB
- Sample230702-1b37vsdf84
- SHA256 f5e0c4f0ef809417d2fcde05fcc037308a323383226169c56912ae401e996bab
Score
3/10
Malware Config
Signatures
- Program crash 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Monster Hunter World v20200109-v20210602 Plus 67 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\Monster Hunter World v20200109-v20210602 Plus 67 Trainer.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3788 -s 11722⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3788 -s 11722⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 352 -p 3788 -ip 37881⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 528 -p 3788 -ip 37881⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3788-133-0x00000233FE3E0000-0x00000233FE3F0000-memory.dmp
memory/3788-134-0x00000233FE3E0000-0x00000233FE3F0000-memory.dmp
memory/3788-135-0x00000233FE3E0000-0x00000233FE3F0000-memory.dmp
memory/3788-136-0x00000233FE3E0000-0x00000233FE3F0000-memory.dmp
memory/3788-137-0x00000233FE3E0000-0x00000233FE3F0000-memory.dmp