Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
40s -
max time network
49s -
platform
windows10-1703_x64 -
resource
win10-20230915-es -
resource tags
arch:x64arch:x86image:win10-20230915-eslocale:es-esos:windows10-1703-x64systemwindows -
submitted
20/09/2023, 18:16
Behavioral task
behavioral1
Sample
Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe
Resource
win10-20230915-es
General
-
Target
Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe
-
Size
1.6MB
-
MD5
bcacc9b5f549ea9f84b329bb2fdf9293
-
SHA1
e5e6b61d29a99deb53d69ef72e1153bbf0beeb55
-
SHA256
eabc658deece003f4e76ef76fd0932a0a2d91e63725bb11daf07dc7052689b76
-
SHA512
86a385a22595129c3059c834a175c303b722f197a59a12bb96a96d01998ca0e8eff5a27552f4921745b7e015b98b4ad46b277099927af89249ce79b22b706483
-
SSDEEP
24576:2inUIrP+Zeb+NKgNqRB+uCny6Dorar3QrLamx4wlKDSVXT5Xzwya:2iZGXN3IB+Tny6cGlwlfXT5Xzw1
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe Token: SeDebugPrivilege 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4264 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4264
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
37B
MD5a733986b23235e9df2ed8652044f4718
SHA1a6b37ab6584096eee4e0bb79013773eb752bfe83
SHA256e34c9e06cdd656e5b901c1eedd6d28aa595ceebd80e3c585218980fbd5a9c473
SHA512635f58eed8f3af8e3b167b9b7825589e17f2aa638449961a11c4c54538c8d262fca7a35001dc3bd1a86aabe7030ddd03e66757aa6b3882ae7c8f99c8aa3389c6