Analysis
-
max time kernel
160s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
12-04-2024 18:07
Behavioral task
behavioral1
Sample
2022年全部热门单机游戏及汉化下载.url
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
2022年全部热门单机游戏及汉化下载.url
Resource
win10v2004-20240412-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Cuphead v1.3.2 Plus 8 Trainer.exe
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral4
Sample
Cuphead v1.3.2 Plus 8 Trainer.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
www.3dmgame.com.url
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral6
Sample
www.3dmgame.com.url
Resource
win10v2004-20240226-en
windows10-2004-x64
General
-
Target
Cuphead v1.3.2 Plus 8 Trainer.exe
-
Size
1.3MB
-
MD5
1a6192c1dbd34a4c1b3cc3f92e8b1954
-
SHA1
40dfedd3a712bc5b918f12e9aa19ae94d5b611c0
-
SHA256
3b3b74d2ae7cde356bd67fc10cb988b363ab3d8155a4cd90126dfd0e20a84727
-
SHA512
466b12869ed21721c46070c7f95d7fd6dad0436e5f43285a402321257ec0f08ca3abdcedc7ee6b3e07990efba685dbfc547a3ad9f9bb6e5e1bbeb126b21a090a
-
SSDEEP
24576:183/DwNbWtvuQXcyCHrbwbb4B8j88DSngtcbJ74A9:yckt2QsdPwe8YycV779
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe 456 Cuphead v1.3.2 Plus 8 Trainer.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 456 Cuphead v1.3.2 Plus 8 Trainer.exe