Overview

overview

10

Static

static

10

Like a Dra...er.exe

windows7-x64

4

Like a Dra...er.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-02-2024 16:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Like a Dragon Infinite Wealth v1.13 Plus 61 Trainer.exe

  • Size

    1.7MB

  • MD5

    d6b759aae796888abc96814a3e9b5e2c

  • SHA1

    4fa0b40df22cd16f79f6beca8183eff5ab3d60ea

  • SHA256

    91b01655a3024747fc5d7a108b5f809cb8b17e391c2188802af55446ec025aa2

  • SHA512

    6b0ba8e208627e0b1e8f27a2d3e2659098e90ad85b7d689252ca30f67241c4e42c3bc7491bff2dc4dd42edc1b0884c03d944174abea3fa4ec8fbc7673ff67ac2

  • SSDEEP

    24576:HvLMEVxTKj/laa8HeHXqGfJv96Sxu5OTJKgH8pezDSVXT5XdkRJya:H4EVxKtaa8iqAR96SMOTyeQXT5XdsJ1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Like a Dragon Infinite Wealth v1.13 Plus 61 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\Like a Dragon Infinite Wealth v1.13 Plus 61 Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4780-0-0x0000024B3E0E0000-0x0000024B3E114000-memory.dmp

    Filesize

    208KB

    Download

  • memory/4780-1-0x00007FFC8F3B0000-0x00007FFC8FE71000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4780-2-0x0000024B3E660000-0x0000024B3E670000-memory.dmp

    Filesize

    64KB

    Download

  • memory/4780-3-0x0000024B3E660000-0x0000024B3E670000-memory.dmp

    Filesize

    64KB

    Download

  • memory/4780-4-0x0000024B3E660000-0x0000024B3E670000-memory.dmp

    Filesize

    64KB

    Download

  • memory/4780-5-0x0000024B5BE40000-0x0000024B5BE48000-memory.dmp

    Filesize

    32KB

    Download

  • memory/4780-6-0x0000024B5C4B0000-0x0000024B5C4E8000-memory.dmp

    Filesize

    224KB

    Download

  • memory/4780-7-0x0000024B5C480000-0x0000024B5C48E000-memory.dmp

    Filesize

    56KB

    Download

  • memory/4780-20-0x00007FFC8F3B0000-0x00007FFC8FE71000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4780-21-0x0000024B3E660000-0x0000024B3E670000-memory.dmp

    Filesize

    64KB

    Download

  • memory/4780-22-0x0000024B3E660000-0x0000024B3E670000-memory.dmp

    Filesize

    64KB

    Download