Analysis

  • max time kernel
    135s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    23-01-2024 16:48

General

  • Target

    Batman_Arkham Origins v1.0-Update 1 Plus 20 Trainer.exe

  • Size

    811KB

  • MD5

    79f134f22883f8a3640412daa1ffa54c

  • SHA1

    be62ac2fe5b65326aace6452eb721599607a8382

  • SHA256

    c9ad79a2557c43fd6dc508b707cf6a06c2c75067bc088f4729bd1dc3f96d0c3e

  • SHA512

    036bc2589701a1bb0e0af8a3f5e1d96a19b6bf3a33d6375f1af25738e89a9c945ae10ee021637a7c7710e65bb6fbfce6229f543b59f60610084f9f7dded7bd58

  • SSDEEP

    12288:xFkJaeEGo9S5d4K0GsAk7IOe+PrAtREB+c3xUOBhh3sGhfmGLpqQQ6RL5DSyt:PkJl4n7AEeUMHEt3ac3sCtLm4DS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Batman_Arkham Origins v1.0-Update 1 Plus 20 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\Batman_Arkham Origins v1.0-Update 1 Plus 20 Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\Documents\FLiNGTrainer\TrainerSettings.ini

    Filesize

    89B

    MD5

    348beb1303020f7b1a6e904441419fe3

    SHA1

    3c2b039e85dd032e08be7626da1630edeff18fff

    SHA256

    9b40d323a1bf0d36fd82dbd36784602e69107073507e8960ebe6c691dbcbda82

    SHA512

    ec12127abc419484b65ebf60eead4b3d2289ead50d6879d664bf6e053050326b199a59f216855b631bc813b0e6cddd5e9640e53e70fd9eb1301646d1bc83850e