Analysis
-
max time kernel
150s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
29/08/2023, 17:18
Behavioral task
behavioral1
Sample
2023年全部热门单机游戏及汉化下载.url
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2023年全部热门单机游戏及汉化下载.url
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
dinput8.dll
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
dinput8.dll
Resource
win10v2004-20230824-en
Behavioral task
behavioral7
Sample
www.3dmgame.com.url
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
www.3dmgame.com.url
Resource
win10v2004-20230703-en
General
-
Target
Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe
-
Size
1.6MB
-
MD5
8c5aa14b001bd42148bbde24159c1602
-
SHA1
912a3bde9b3a4fcd714d42e14b61c1105ffedbf4
-
SHA256
2e68b7e1a68dd836e24f2e19ad1d785ea0c6c6ea349ffa0d11c8c9b92525a066
-
SHA512
49ef2059d082ef8f6773407d11cd2277b66ee166d72e3249af70519a6367bb24a3cc7b7d66153020cd07c7bd255f1a46d3b19d82572baed53d5f2458fb350752
-
SSDEEP
24576:FcuQIWzErfPc16ijZmm6W6RE/VoTtnkW3tr6kTk/OTsyhDSVXT5XicHya:FcuO1rYm63RE/mYdORGXT5XicH1
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3396 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer Updated.exe