ff0db33d91832b82c11d6c8d931dffc91d4714db7375037376f646a64f618fe5

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-03-2024 09:59

Target

67 options, mod required/Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe
Size

1.6MB
MD5

7e7c37abc136770d72f401aa79958bea
SHA1

83fed3e1cca9cdcabee891953edb0e83bd06dc24
SHA256

56da7d8eac549241b6945c213eda978c340e80b15a1dd2f353010868d6a2b6aa
SHA512

83db97d27068cc350c715ead5bba0d2e88fe0891330a11783e647cceddddfe162ffa4b61dcfa8f49e46aaf28ad8e4e93c3984d72623656325f6cba108c67ca81
SSDEEP

24576:mQNQoxsvHM5QR7iv5Drj4LMlCl8ubKropFOGaPECkDtGQjnEdpDSyhi7b:mQXEHfcva38uAGYZ/kwon2ho

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
640	Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	640	Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 640 wrote to memory of 2500	640	Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe	28
PID 640 wrote to memory of 2500	640	Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe	28
PID 640 wrote to memory of 2500	640	Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe	28

C:\Users\Admin\AppData\Local\Temp\67 options, mod required\Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe
"C:\Users\Admin\AppData\Local\Temp\67 options, mod required\Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:640
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 640 -s 836
  2⤵
  PID:2500

memory/640-0-0x0000000000240000-0x0000000000272000-memory.dmp

Filesize
200KB

Download
memory/640-1-0x000007FEF5BA0000-0x000007FEF658C000-memory.dmp

Filesize
9.9MB

Download
memory/640-3-0x000000001AFB0000-0x000000001B030000-memory.dmp

Filesize
512KB

Download
memory/640-2-0x000000001AFB0000-0x000000001B030000-memory.dmp

Filesize
512KB

Download
memory/640-4-0x000000001AFB0000-0x000000001B030000-memory.dmp

Filesize
512KB

Download
memory/640-5-0x000000001AFB0000-0x000000001B030000-memory.dmp

Filesize
512KB

Download
memory/640-6-0x000000001AFB0000-0x000000001B030000-memory.dmp

Filesize
512KB

Download
memory/640-10-0x000000001AFB0000-0x000000001B030000-memory.dmp

Filesize
512KB

Download
memory/640-11-0x000007FEF5BA0000-0x000007FEF658C000-memory.dmp

Filesize
9.9MB

Download
memory/640-12-0x000000001AFB0000-0x000000001B030000-memory.dmp

Filesize
512KB

Download
memory/640-13-0x000000001AFB0000-0x000000001B030000-memory.dmp

Filesize
512KB

Download