Overview

overview

10

Static

static

10

Dragon Bal...er.exe

windows7-x64

1

Dragon Bal...er.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    31s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20-03-2024 07:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Dragon Ball Z Kakarot v1.03-v2.10 Plus 32 Trainer.exe

  • Size

    1.3MB

  • MD5

    5eddb39c93f94f32d3cc032e44ad66e0

  • SHA1

    8e0f67182be0bcf6e25c703df2865edfff0d4cd1

  • SHA256

    570cccf3c4a0422bdf3173edcbd7ccbcc1c432a5c8d842b127f407e5742eb901

  • SHA512

    8d43cf9d0d502bd82d986147664a1fc541ee2b64e872c92495f31eb45af7320302a66f4a02755bd266e2ba054ae06a899dc281abd63236e52f90140f5b45c51d

  • SSDEEP

    24576:Bv4D47npBuZ6nw+7eEaHMrIyaTDSVXT5X3jxu:B6wnpBuZ6w+yF1wXT5Xzxu

Score
1/10

Malware Config

Signatures

  • Modifies system certificate store 2 TTPs 6 IoCs
    evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Dragon Ball Z Kakarot v1.03-v2.10 Plus 32 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\Dragon Ball Z Kakarot v1.03-v2.10 Plus 32 Trainer.exe"
    1⤵
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2360

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357
    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    18d05a976e29976b2dedb2beea42f0dc

    SHA1

    bc4b13ceb6e91c6f417b9eb630474df5d8460d1e

    SHA256

    9ad900aac34083d7dcda1d062e28a8471783945f18ef8834a1e9d9479aa6387c

    SHA512

    80d039f2e40276b3a440b0c1e4d9c09fae3fde358ddf7417b4c204027706e3d87952195a71f4f9903225c02b52a77d1bfee2d2e899624cfecb01b99a3359dd6c

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    8d630b57602257a57f1fd9040a212e8a

    SHA1

    93f16ea52eaae27d91a8e993ca2b332ef44b327f

    SHA256

    daeb9154c478181dd4cf91b6f13730966c6155e69e67b9c6cca05c603324b614

    SHA512

    8c8403e67790340e9c0b505648b27775efe893a604e5d075e1d27738a72863db04782bf78c844a1223e1811802763b18bad13e14c14919751c1b0d6e230bd510

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    ce8f2b973d231f920cf465d2479b68d1

    SHA1

    101206c463772dc4238be03d40441c0eb891b293

    SHA256

    503e03b6892823b76903187d84299f1c553a96af3a82e6a944d07be619c15e6e

    SHA512

    a5e30c8dd783e38bbee4b82ddab5af09c7ff7aeefc2b55c2caa9005ad57467f7fac4b706bde4b33474d27b9c54d8043e6545e45a3dab4d1fe3305072acea9d99

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
    Filesize

    242B

    MD5

    fd0c6f1a1f6663ea6d3a8112a26778ca

    SHA1

    e2bc13d3efbc32f4f59d88c08df3d8936c5a913c

    SHA256

    98b3763f5a75e6e7f71f49a8fce97d69a420bdfeb22b7fa82e7e1bacaa87ffb9

    SHA512

    b783949cce00ebabc3f4d8ebb99fd240cc8df6489b543a47d01a84eea75657b1371bfcaebb8cfd88f573edf3cf0a3d7d76ee65de279966d44699a205cff9caf7

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\Tar2699.tmp
    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63

    Download Submit

  • memory/2360-3-0x000000001B1D0000-0x000000001B250000-memory.dmp

    Filesize

    512KB

    Download

  • memory/2360-11-0x000000001B1D0000-0x000000001B250000-memory.dmp

    Filesize

    512KB

    Download

  • memory/2360-7-0x000000001B1D0000-0x000000001B250000-memory.dmp

    Filesize

    512KB

    Download

  • memory/2360-5-0x0000000000500000-0x000000000050A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2360-6-0x0000000000500000-0x000000000050A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2360-0-0x0000000000240000-0x0000000000274000-memory.dmp

    Filesize

    208KB

    Download

  • memory/2360-4-0x000000001B1D0000-0x000000001B250000-memory.dmp

    Filesize

    512KB

    Download

  • memory/2360-2-0x000007FEF5AD0000-0x000007FEF64BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2360-1-0x0000000000240000-0x0000000000274000-memory.dmp

    Filesize

    208KB

    Download

  • memory/2360-169-0x000007FEF5AD0000-0x000007FEF64BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2360-170-0x0000000000500000-0x000000000050A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2360-171-0x0000000000500000-0x000000000050A000-memory.dmp

    Filesize

    40KB

    Download