Overview

overview

10

Static

static

10

Total War ...er.exe

windows7-x64

1

Total War ...er.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    28s
  • max time network
    24s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-04-2024 22:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Total War THREE KINGDOMS v1.0-v1.7.0 Plus 25 Trainer.exe

  • Size

    1.3MB

  • MD5

    a762a244dad8ed84547ee40c5b703f4e

  • SHA1

    f9f4ec72d330b5e9e0a951f8dc1313665c8cd32b

  • SHA256

    ce4f26e47135335cbb20c5e0b1afbd0e4697984d311007acbe77e0b60f318467

  • SHA512

    33c78b31fb23dd047ff9e3228c5201b7f824fd8c84f52740d022b277a42cf8ed6feabe9f0f515e815025048abae22e5234adc57bb021b4021dff677a68e4bf8a

  • SSDEEP

    24576:5Mlx5eI71u5DtyXIz8O/nyXQx07wueRvbTEbJ7tDS5+:S71K028yygKeeV76+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Total War THREE KINGDOMS v1.0-v1.7.0 Plus 25 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\Total War THREE KINGDOMS v1.0-v1.7.0 Plus 25 Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4388-0-0x00000174525F0000-0x0000017452622000-memory.dmp

    Filesize

    200KB

    Download

  • memory/4388-1-0x00007FFF4B4F0000-0x00007FFF4BFB1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4388-2-0x0000017452680000-0x0000017452690000-memory.dmp

    Filesize

    64KB

    Download

  • memory/4388-3-0x0000017452680000-0x0000017452690000-memory.dmp

    Filesize

    64KB

    Download

  • memory/4388-4-0x0000017452680000-0x0000017452690000-memory.dmp

    Filesize

    64KB

    Download

  • memory/4388-5-0x0000017452680000-0x0000017452690000-memory.dmp

    Filesize

    64KB

    Download

  • memory/4388-6-0x0000017452680000-0x0000017452690000-memory.dmp

    Filesize

    64KB

    Download

  • memory/4388-16-0x00007FFF4B4F0000-0x00007FFF4BFB1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4388-17-0x0000017452680000-0x0000017452690000-memory.dmp

    Filesize

    64KB

    Download

  • memory/4388-18-0x0000017452680000-0x0000017452690000-memory.dmp

    Filesize

    64KB

    Download

  • memory/4388-19-0x0000017452680000-0x0000017452690000-memory.dmp

    Filesize

    64KB

    Download

  • memory/4388-20-0x0000017452680000-0x0000017452690000-memory.dmp

    Filesize

    64KB

    Download

  • memory/4388-21-0x0000017452680000-0x0000017452690000-memory.dmp

    Filesize

    64KB

    Download