Analysis
- max time kernel
150s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
10/03/2024, 09:59
Behavioral task
behavioral1
Sample
14 options, standalone version/Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe
Resource
win7-20240221-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
14 options, standalone version/Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
67 options, mod required/Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe
Resource
win7-20240221-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
67 options, mod required/Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target 14 options, standalone version/Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe
- Size 1.8MB
- Sample240310-l1gb3aaa45
- SHA256 00d1647eb26f25c998c9356f979fec37e016e3f6ed091573d2c8a9df3bd3e722
- MD5 2ecdaccc687965ff9ab98716aa6a1018
- SHA1 0f25b0e2c7ff2e39342c2e55ce77d03f557075cb
- SHA512 43c32e90f0bc8c7f7f604335d20c901cfffde866727d28055941a498c94394a19e337c438c3e8d8836fbbba956f4e63d62df261ed4adeef7ec43f4a898c08f68
- SSDEEP 24576:a6PAhmaafRqOlMGnp9Oi+u/g8Z9OjWYOzRFg7qaPECkDtGQjnEd6vVfacoDS0:a80OlDpv+u1ujWBzgR/kwonPvtacM
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3224 Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\14 options, standalone version\Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\14 options, standalone version\Monster Hunter World v20200109-v20201001 Plus 14 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3224