Analysis
-
max time kernel
135s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
06-02-2024 13:23
General
-
Target
Cyberpunk 2077 v1.03-v1.61 Plus 32 Trainer.exe
-
Size
1.2MB
-
MD5
4707c8d487524676db22f2078aca73fc
-
SHA1
9bea87066d7be16157ba84ec383b14cf76303be5
-
SHA256
094dbdada4c194df251b0a7354f92e532abf9c18b3868bd9e6377c35c6688122
-
SHA512
d6549f2b1d6f56e3a7a5ad1cfeb49d080de904a951d99bd827868b4400755efa08f58fbd144bf63916b0539930670b09c3bf73de5209b7aed05c192e59f8be12
-
SSDEEP
24576:yi2LZSiHwj3a4yocdAz5pdyRVr94cpK6McZbJ7FDSTQ1Wj:cWK4yocdAFpIPR1KXcZV701
Malware Config
Signatures
-
Modifies system certificate store 2 TTPs 6 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Cyberpunk 2077 v1.03-v1.61 Plus 32 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\Cyberpunk 2077 v1.03-v1.61 Plus 32 Trainer.exe"1⤵
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
344B
MD53f08768510b071c66757fc6442755758
SHA1bd0cb892fbfb1d70a038403cb8457561a793793d
SHA256a9ffb64218663776d5f61c07c4b382942137160d24dfa60584b9b7866a911966
SHA512c59525b3785b84327af7679b1886a1e14c2981a86831742cf2cabf20086293f399c8a6a145812f1413976f8f849d4ab932eccda564a77601bbd82a16ea38719b
-
Filesize
29B
MD5100ad43a6e39d44013fad7f3aa343e3b
SHA1dc8050bdee8a74354cb4a2057e4e703e7a460943
SHA256a7b15ee77dd0db946e7fdbf574889bd30c23fa3d7bff6d509df118595ee14ec5
SHA51220f9b26416804f917d0642d35de32ccae0849c34bff4eb75c6450b1ee83756f3275850101d7482eb59c78356b1489c2d4db6cd95ae9b72b64d5eeab700d36ba8
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
130KB
MD5ad630dec9e6db1973a705063f2e27d15
SHA1d24fde1b1e1a6c664d1c08bcc6e376012e2dc1cf
SHA256fe648cccbcd474f11f0b2bc76539e59b6ef6ba7e7793f7b2792526e6028430ca
SHA512ed1dc73e8d49c911cd59f39cc8b3cabf07e5122f5084c5c3805a1bb05bd64700d9fe7db9506d0d0f06c990f38170a939f044f04593c2b5575ded78136f530f4b
-
Filesize
512KB
-
Filesize
40KB
-
Filesize
512KB
-
Filesize
40KB
-
Filesize
200KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
40KB
-
Filesize
40KB