Analysis
-
max time kernel
151s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
12-02-2024 14:25
Behavioral task
behavioral1
Sample
Cuphead v1.3.2 Plus 8 Trainer.exe
Resource
win7-20231129-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Cuphead v1.3.2 Plus 8 Trainer.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Cuphead v1.3.2 Plus 8 Trainer.exe
-
Size
1.3MB
-
MD5
1a6192c1dbd34a4c1b3cc3f92e8b1954
-
SHA1
40dfedd3a712bc5b918f12e9aa19ae94d5b611c0
-
SHA256
3b3b74d2ae7cde356bd67fc10cb988b363ab3d8155a4cd90126dfd0e20a84727
-
SHA512
466b12869ed21721c46070c7f95d7fd6dad0436e5f43285a402321257ec0f08ca3abdcedc7ee6b3e07990efba685dbfc547a3ad9f9bb6e5e1bbeb126b21a090a
-
SSDEEP
24576:183/DwNbWtvuQXcyCHrbwbb4B8j88DSngtcbJ74A9:yckt2QsdPwe8YycV779
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe 2856 Cuphead v1.3.2 Plus 8 Trainer.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2856 Cuphead v1.3.2 Plus 8 Trainer.exe