Overview

overview

10

Static

static

10

14 options...er.exe

windows7-x64

1

14 options...er.exe

windows10-2004-x64

1

67 options...er.exe

windows7-x64

1

67 options...er.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-03-2024 09:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    67 options, mod required/Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe

  • Size

    1.6MB

  • MD5

    7e7c37abc136770d72f401aa79958bea

  • SHA1

    83fed3e1cca9cdcabee891953edb0e83bd06dc24

  • SHA256

    56da7d8eac549241b6945c213eda978c340e80b15a1dd2f353010868d6a2b6aa

  • SHA512

    83db97d27068cc350c715ead5bba0d2e88fe0891330a11783e647cceddddfe162ffa4b61dcfa8f49e46aaf28ad8e4e93c3984d72623656325f6cba108c67ca81

  • SSDEEP

    24576:mQNQoxsvHM5QR7iv5Drj4LMlCl8ubKropFOGaPECkDtGQjnEdpDSyhi7b:mQXEHfcva38uAGYZ/kwon2ho

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\67 options, mod required\Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\67 options, mod required\Monster Hunter World v20200109-v20201001 Plus 67 Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1308-0-0x00000253153D0000-0x0000025315402000-memory.dmp

    Filesize

    200KB

    Download

  • memory/1308-1-0x00007FF8C1DA0000-0x00007FF8C2861000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/1308-2-0x000002532DA90000-0x000002532DAA0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1308-3-0x000002532DA90000-0x000002532DAA0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1308-4-0x000002532DA90000-0x000002532DAA0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1308-5-0x000002532DA90000-0x000002532DAA0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1308-6-0x000002532DA90000-0x000002532DAA0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1308-10-0x0000025332660000-0x0000025332760000-memory.dmp

    Filesize

    1024KB

    Download

  • memory/1308-11-0x0000025332660000-0x0000025332760000-memory.dmp

    Filesize

    1024KB

    Download

  • memory/1308-18-0x00007FF8C1DA0000-0x00007FF8C2861000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/1308-19-0x000002532DA90000-0x000002532DAA0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1308-20-0x000002532DA90000-0x000002532DAA0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1308-21-0x000002532DA90000-0x000002532DAA0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1308-22-0x000002532DA90000-0x000002532DAA0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1308-23-0x000002532DA90000-0x000002532DAA0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1308-24-0x0000025332660000-0x0000025332760000-memory.dmp

    Filesize

    1024KB

    Download

  • memory/1308-25-0x0000025332660000-0x0000025332760000-memory.dmp

    Filesize

    1024KB

    Download