Analysis
-
max time kernel
39s -
max time network
39s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
08-02-2024 03:06
Behavioral task
behavioral1
Sample
Palworld Early Access Plus 46 Trainer.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Palworld Early Access Plus 46 Trainer.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Palworld Early Access Plus 46 Trainer.exe
-
Size
2.0MB
-
MD5
fcc947ed36c445777ea8e220dee5bc0c
-
SHA1
edb7775eed9d5f5825d0858ecf6b7541f079d656
-
SHA256
dfd00a68ebacdc4139def9f13a1c70388f57a5c3c0c6c3e4afc93f532fcea77a
-
SHA512
e43ea3c6b7b3909446f54b429b72041715b49a361afe4847530adf10a987db674dc284b40d81a9f035ae0c35b739be84c2c4467446316ee85cefe4d551a5384d
-
SSDEEP
49152:JXROAOvyNVRdiTilSD0lkuBKr//XT5XdGY1:JBhMy/R+GlkuB8//D5N91
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe 4080 Palworld Early Access Plus 46 Trainer.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 4080 Palworld Early Access Plus 46 Trainer.exe Token: SeDebugPrivilege 4080 Palworld Early Access Plus 46 Trainer.exe