Overview

overview

10

Static

static

10

Marvels Av...er.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    13s
  • max time network
    19s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-03-2024 15:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Marvels Avengers v1.0-v2.8.1.0 Plus 17 Trainer.exe

  • Size

    1.3MB

  • MD5

    387b67cb17180712511ccd212eda221b

  • SHA1

    336e72c020bbaa1d195cbda206d12aacc39420ca

  • SHA256

    af69518a568a43c0e5ee28cafc08e6755855431753560244effe0a383c072007

  • SHA512

    350accab0333df06923871bc74f16239ee61199caf626f9409538e3ae3249142ebfa7161e71c211f56d3a87432e74cd0f4d8b37e13323e34c38066e78cc1ea3f

  • SSDEEP

    24576:a8cdJcdsnqZX/s5tnmEDbD5dpS/DvZyaVDSVXT5Xvur:FdsnmX/qxzfwZ1qXT5XWr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Marvels Avengers v1.0-v2.8.1.0 Plus 17 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\Marvels Avengers v1.0-v2.8.1.0 Plus 17 Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1684-2-0x0000011A8D120000-0x0000011A8D154000-memory.dmp

    Filesize

    208KB

    Download

  • memory/1684-5-0x00007FFFB8D10000-0x00007FFFB97D1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/1684-6-0x0000011AA5BF0000-0x0000011AA5C00000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1684-7-0x0000011AA5BF0000-0x0000011AA5C00000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1684-8-0x0000011AA5BF0000-0x0000011AA5C00000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1684-9-0x0000011AA9940000-0x0000011AA9948000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1684-10-0x0000011AA5BF0000-0x0000011AA5C00000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1684-11-0x0000011AA99C0000-0x0000011AA99F8000-memory.dmp

    Filesize

    224KB

    Download

  • memory/1684-12-0x0000011AA9990000-0x0000011AA999E000-memory.dmp

    Filesize

    56KB

    Download

  • memory/1684-28-0x00007FFFB8D10000-0x00007FFFB97D1000-memory.dmp

    Filesize

    10.8MB

    Download