Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
18-05-2024 08:20
General
-
Target
ALI213-Orcs.Must.Die.3.v1.1.1.Plus.18.Trainer.Fling/Orcs Must Die 3 v1.0-v1.1.1 Plus 18 Trainer.exe
-
Size
1.2MB
-
MD5
f0c9746bc8ecd392d01f4c9b5252edbe
-
SHA1
b68af6e0e72cae2cf197c1ad092865ef1291eb3c
-
SHA256
d4e6652eb039b0e221c3e0cc43afa269f1e0f1c7fadd64c0e9b0848ab219bf51
-
SHA512
3a5993559e0ee25365d876c55c05da2379a3bb1f9fe5910bb00143af22d7efd9f4be3fcc8dd1557e7e1952a559f13c0aba5c51165a6a2291fa09db54f482628a
-
SSDEEP
24576:0lYPGio0sAC1VZoE5lg3DBOOsTo9ndFhsl63TDSKhhfbJ7:0uqlAezoE52TMris8LV7
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ALI213-Orcs.Must.Die.3.v1.1.1.Plus.18.Trainer.Fling\Orcs Must Die 3 v1.0-v1.1.1 Plus 18 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\ALI213-Orcs.Must.Die.3.v1.1.1.Plus.18.Trainer.Fling\Orcs Must Die 3 v1.0-v1.1.1 Plus 18 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1276 -s 7682⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
4KB