Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-05-2024 03:48

General

  • Target

    v2/Monster Hunter World v20200109-v20200205 Plus 62 Trainer v2.exe

  • Size

    1.9MB

  • MD5

    659dc23806039d40cf31e3f51b58f22d

  • SHA1

    6340aa3ae8716fe8ab9fb0e09df32aef0a57e088

  • SHA256

    bd4997b60aa9eeed5e873c58bb3bfea7bfad350b7d18395b8c70b168cbebbe20

  • SHA512

    817e8f0f0b0bd4f009ae6d649affb4629eff1f599bc063c9ce108678d69029a6e5a712c1917cd2d4e28086d4c85928d9d74b2982f74e5e9b4100fd0bf0404e42

  • SSDEEP

    24576:e48QH2Y50Z3FveltcoxQAm+zncaPECkDtGQjnEd6vVfacwDSfWB:/750J5scgxm+T/kwonPvtac

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\v2\Monster Hunter World v20200109-v20200205 Plus 62 Trainer v2.exe
    "C:\Users\Admin\AppData\Local\Temp\v2\Monster Hunter World v20200109-v20200205 Plus 62 Trainer v2.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2992-0-0x00007FFECFA03000-0x00007FFECFA05000-memory.dmp

    Filesize

    8KB

  • memory/2992-1-0x000001A7E8F00000-0x000001A7E8F32000-memory.dmp

    Filesize

    200KB

  • memory/2992-2-0x00007FFECFA00000-0x00007FFED04C1000-memory.dmp

    Filesize

    10.8MB

  • memory/2992-3-0x00007FFECFA00000-0x00007FFED04C1000-memory.dmp

    Filesize

    10.8MB

  • memory/2992-6-0x00007FFECFA00000-0x00007FFED04C1000-memory.dmp

    Filesize

    10.8MB

  • memory/2992-7-0x00007FFECFA00000-0x00007FFED04C1000-memory.dmp

    Filesize

    10.8MB

  • memory/2992-9-0x00007FFECFA00000-0x00007FFED04C1000-memory.dmp

    Filesize

    10.8MB

  • memory/2992-10-0x00007FFECFA00000-0x00007FFED04C1000-memory.dmp

    Filesize

    10.8MB

  • memory/2992-18-0x00007FFECFA00000-0x00007FFED04C1000-memory.dmp

    Filesize

    10.8MB

  • memory/2992-19-0x00007FFECFA03000-0x00007FFECFA05000-memory.dmp

    Filesize

    8KB

  • memory/2992-20-0x00007FFECFA00000-0x00007FFED04C1000-memory.dmp

    Filesize

    10.8MB

  • memory/2992-21-0x00007FFECFA00000-0x00007FFED04C1000-memory.dmp

    Filesize

    10.8MB

  • memory/2992-22-0x00007FFECFA00000-0x00007FFED04C1000-memory.dmp

    Filesize

    10.8MB

  • memory/2992-23-0x00007FFECFA00000-0x00007FFED04C1000-memory.dmp

    Filesize

    10.8MB

  • memory/2992-24-0x00007FFECFA00000-0x00007FFED04C1000-memory.dmp

    Filesize

    10.8MB