Analysis

  • max time kernel
    150s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/08/2023, 17:18

General

  • Target

    Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe

  • Size

    1.6MB

  • MD5

    8c5aa14b001bd42148bbde24159c1602

  • SHA1

    912a3bde9b3a4fcd714d42e14b61c1105ffedbf4

  • SHA256

    2e68b7e1a68dd836e24f2e19ad1d785ea0c6c6ea349ffa0d11c8c9b92525a066

  • SHA512

    49ef2059d082ef8f6773407d11cd2277b66ee166d72e3249af70519a6367bb24a3cc7b7d66153020cd07c7bd255f1a46d3b19d82572baed53d5f2458fb350752

  • SSDEEP

    24576:FcuQIWzErfPc16ijZmm6W6RE/VoTtnkW3tr6kTk/OTsyhDSVXT5XicHya:FcuO1rYm63RE/mYdORGXT5XicH1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe
    "C:\Users\Admin\AppData\Local\Temp\Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3396-2-0x0000027ECE910000-0x0000027ECE944000-memory.dmp

    Filesize

    208KB

  • memory/3396-5-0x00007FF8AF970000-0x00007FF8B0431000-memory.dmp

    Filesize

    10.8MB

  • memory/3396-6-0x0000027ECE990000-0x0000027ECE9A0000-memory.dmp

    Filesize

    64KB

  • memory/3396-7-0x0000027ECE990000-0x0000027ECE9A0000-memory.dmp

    Filesize

    64KB

  • memory/3396-8-0x0000027ECE990000-0x0000027ECE9A0000-memory.dmp

    Filesize

    64KB

  • memory/3396-9-0x0000027ECE990000-0x0000027ECE9A0000-memory.dmp

    Filesize

    64KB

  • memory/3396-10-0x0000027ECEFD0000-0x0000027ECEFD8000-memory.dmp

    Filesize

    32KB

  • memory/3396-11-0x0000027ECE990000-0x0000027ECE9A0000-memory.dmp

    Filesize

    64KB

  • memory/3396-12-0x0000027EECED0000-0x0000027EECF08000-memory.dmp

    Filesize

    224KB

  • memory/3396-13-0x0000027EECE90000-0x0000027EECE9E000-memory.dmp

    Filesize

    56KB

  • memory/3396-26-0x00007FF8AF970000-0x00007FF8B0431000-memory.dmp

    Filesize

    10.8MB

  • memory/3396-27-0x0000027ECE990000-0x0000027ECE9A0000-memory.dmp

    Filesize

    64KB

  • memory/3396-28-0x0000027ECE990000-0x0000027ECE9A0000-memory.dmp

    Filesize

    64KB

  • memory/3396-29-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB

  • memory/3396-30-0x0000027ECE990000-0x0000027ECE9A0000-memory.dmp

    Filesize

    64KB

  • memory/3396-31-0x0000027ECE990000-0x0000027ECE9A0000-memory.dmp

    Filesize

    64KB

  • memory/3396-32-0x0000027ECE990000-0x0000027ECE9A0000-memory.dmp

    Filesize

    64KB

  • memory/3396-33-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB

  • memory/3396-34-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB

  • memory/3396-35-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB

  • memory/3396-36-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB

  • memory/3396-37-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB

  • memory/3396-38-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB

  • memory/3396-39-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB

  • memory/3396-40-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB

  • memory/3396-41-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB

  • memory/3396-42-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB

  • memory/3396-43-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB

  • memory/3396-44-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB

  • memory/3396-45-0x0000027EE8BC0000-0x0000027EE8DB7000-memory.dmp

    Filesize

    2.0MB