Analysis
-
max time kernel
16s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
23-04-2024 22:46
General
-
Target
Total War THREE KINGDOMS v1.0-v1.7.0 Plus 25 Trainer.exe
-
Size
1.3MB
-
MD5
a762a244dad8ed84547ee40c5b703f4e
-
SHA1
f9f4ec72d330b5e9e0a951f8dc1313665c8cd32b
-
SHA256
ce4f26e47135335cbb20c5e0b1afbd0e4697984d311007acbe77e0b60f318467
-
SHA512
33c78b31fb23dd047ff9e3228c5201b7f824fd8c84f52740d022b277a42cf8ed6feabe9f0f515e815025048abae22e5234adc57bb021b4021dff677a68e4bf8a
-
SSDEEP
24576:5Mlx5eI71u5DtyXIz8O/nyXQx07wueRvbTEbJ7tDS5+:S71K028yygKeeV76+
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Total War THREE KINGDOMS v1.0-v1.7.0 Plus 25 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\Total War THREE KINGDOMS v1.0-v1.7.0 Plus 25 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1756 -s 7802⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
200KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
512KB