06a7c03d5bdd96a30a32cff0ae0f587fb0e7553b40c43034b90559584adc921f

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
10-05-2024 16:49

Target

Launcher.exe
Size

22KB
MD5

aa13e9eb5a58de238de748f3ac473f16
SHA1

92fed74817e5ac5995961dd57010dfdd9fabe0e9
SHA256

82f2ec3be22a48f15086fbbf7b5aea027c99247a26ac2897cb205c030891ad92
SHA512

296a33d9a380abd0b22f350e162e44ceffea3310c2509f1b21161e682e64622bf9d2d02e420a9fdd0335a62ef29ecaa8ccd874c1682b39c333d9ec7c283e5199
SSDEEP

384:m+LPB3jY/QHuGziKDeOKDVrsiKDeOKDVrOB:mc53M4HIbhb+

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

Launcher.exe

description	pid	Process
Token: SeDebugPrivilege	764	Launcher.exe

Suspicious use of FindShellTrayWindow 7 IoCs

Processes:

game.exe

Suspicious use of SendNotifyMessage 7 IoCs

Processes:

game.exe

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

game.exe

pid	Process
4300	game.exe
4300	game.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

Launcher.exe

description	pid	Process	procid_target
PID 764 wrote to memory of 4300	764	Launcher.exe	84
PID 764 wrote to memory of 4300	764	Launcher.exe	84
PID 764 wrote to memory of 4300	764	Launcher.exe	84

memory/4300-0-0x00000000008A0000-0x00000000008A1000-memory.dmp

Filesize
4KB

Download
memory/4300-1-0x0000000000400000-0x00000000005EF000-memory.dmp

Filesize
1.9MB

Download
memory/4300-3-0x00000000008A0000-0x00000000008A1000-memory.dmp

Filesize
4KB

Download