Resubmissions

11-02-2024 19:29

240211-x7e85acg68 10

Analysis

  • max time kernel
    90s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-02-2024 19:29

General

  • Target

    67 options, mod required/Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe

  • Size

    1.6MB

  • MD5

    d8d04a49a7ebe94d52daa21380c7f981

  • SHA1

    c61619f51bb3ded298be6ff4f37d657c7f4dee88

  • SHA256

    48000c42895041ab94da59597b322a9afeacac40cbd8d7654115df6eaed44708

  • SHA512

    6aa11b73cbfc871ea23ecc136e2585de98ff2989f6ac20a9db8855df0657024990a4f87cf1dc2413fd49e66c8ce57246f7405911e1b24d22e49727a4aae035e0

  • SSDEEP

    24576:zQIQoxsvHM5QR7iv5Drj43MlCEs9jaPECkDtGQjnEdpDS5C:zQWEHfcvaWs9E/kwonQ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\67 options, mod required\Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\67 options, mod required\Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2292-0-0x000001C7BDE50000-0x000001C7BDE82000-memory.dmp

    Filesize

    200KB

  • memory/2292-1-0x00007FF8C5960000-0x00007FF8C6421000-memory.dmp

    Filesize

    10.8MB

  • memory/2292-2-0x000001C7BDEE0000-0x000001C7BDEF0000-memory.dmp

    Filesize

    64KB

  • memory/2292-3-0x000001C7BDEE0000-0x000001C7BDEF0000-memory.dmp

    Filesize

    64KB

  • memory/2292-4-0x000001C7BDEE0000-0x000001C7BDEF0000-memory.dmp

    Filesize

    64KB

  • memory/2292-5-0x000001C7BDEE0000-0x000001C7BDEF0000-memory.dmp

    Filesize

    64KB

  • memory/2292-6-0x00007FF8C5960000-0x00007FF8C6421000-memory.dmp

    Filesize

    10.8MB