Analysis
-
max time kernel
75s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230621-en -
resource tags
-
submitted
02-07-2023 21:29
General
-
Target
Monster Hunter World v20200109-v20210602 Plus 67 Trainer.exe
-
Size
1.6MB
-
MD5
eb3295617d26a4902d2c51fc8ca4c9b7
-
SHA1
c1cc56cac046678b5373ff473da1560b35cd4ca6
-
SHA256
f5e0c4f0ef809417d2fcde05fcc037308a323383226169c56912ae401e996bab
-
SHA512
f3fc1575075da3c875cb80e4d414a161d2c84be00febb7dacdfeab0f783117fd09984a95f5cf5863ccfa60069492a5e0313d183e01febb54b8b630ed3274eb66
-
SSDEEP
24576:K9SxXI1fDRUbRa/9ghKUU6F9UK3/fsA9SPQaPECkDtGQjnEdfDSKk:crWCOhKOUKMA9qT/kwonn
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Monster Hunter World v20200109-v20210602 Plus 67 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\Monster Hunter World v20200109-v20210602 Plus 67 Trainer.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3788 -s 11722⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3788 -s 11722⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 352 -p 3788 -ip 37881⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 528 -p 3788 -ip 37881⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB