Analysis
-
max time kernel
149s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
08/03/2024, 02:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EldenRingFPSUnlockAndMore_v1.1.0.0.exe
Resource
win7-20240220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
EldenRingFPSUnlockAndMore_v1.1.0.0.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
EldenRingFPSUnlockAndMore_v1.1.0.0.exe
-
Size
393KB
-
MD5
1fffda8835e3673aadb418b0fb2cf935
-
SHA1
de5726a86abd86e80b123f5425857d7ce9b242f0
-
SHA256
15ee24284cd11c49da02eb2ad1e55bba6c70d5d2ebe85859079872edaffd5a0c
-
SHA512
6bbd74eca660a80d3375b939cbbc9bcc0a287942e8594129fadf46c12aaa8a1798242966faaca57fc6d79ab1ea6565e23ca652967b24747e61cd942993fde105
-
SSDEEP
6144:qIw8okGbaLIT8yB2oFpgNTWOTsMFxIT8yB2QFpgvTWOTpMK:68UT8yBfLgNbFFiT8yBNLgvbuK
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2088 EldenRingFPSUnlockAndMore_v1.1.0.0.exe