Analysis
-
max time kernel
14s -
max time network
71s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 01:06
Static task
static1
Behavioral task
behavioral1
Sample
HomeOfGamehacking.url
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
HomeOfGamehacking.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Trainer.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Trainer.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
bassmod.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
bassmod.dll
Resource
win10v2004-20231215-en
General
-
Target
Trainer.exe
-
Size
637KB
-
MD5
fb96e9b8f99a539f0cdeac10ca8d83c7
-
SHA1
c3d18f69fbe1835d70aaf71c544fa55a268ed929
-
SHA256
07a8ae3fee49228b77a20062eeed9e503b1042ad40da39dd378172d626dfed6d
-
SHA512
d194db254d83ee2a297cadb19ada49d43a258153e384de76431f5e9320313edf4c9c84b5ae52da167ca7ec203752eb52a0dd02e0985ceed6bf17dfb446bf7112
-
SSDEEP
12288:D333QolLAaVIs50vkHkLIVwvm4jpbP6oyCdh:D33golLPVIs5pEsSOMdzdh
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe 2416 Trainer.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2192 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 2192 AUDIODG.EXE