Overview

overview

10

Static

static

10

Monster Hu...er.exe

windows7-x64

1

Monster Hu...er.exe

windows10-2004-x64

1

v2/Monster...v2.exe

windows7-x64

1

v2/Monster...v2.exe

windows10-2004-x64

1

v3/Monster...v3.exe

windows7-x64

1

v3/Monster...v3.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-05-2024 15:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    v2/Monster Hunter World v20200109-v20200126 Plus 58 Trainer v2.exe

  • Size

    1.8MB

  • MD5

    bee56b8c825375bed337edff8111407f

  • SHA1

    30049243e44250f353670e19a32f2ca3466972c5

  • SHA256

    8fa646d64682d40ce9fcadb1bc7042a6d95933465ce8dd627a2697586e8d6040

  • SHA512

    4d45bfc6cf1f978926e99b5669acaef40c00176de393b037a5368a9a97ccca1907037b970adb14ddd9749028597d8267cc8104461cdccb5bf881b320f48f9c45

  • SSDEEP

    24576:lnFwicVxcH1PZ+w5ciDrYMlDejCvrTZQrenkaPECkDtGQjnEdUaxVNDSfWB:0HcVIicuYMlDHTZQqf/kwontar

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\v2\Monster Hunter World v20200109-v20200126 Plus 58 Trainer v2.exe
    "C:\Users\Admin\AppData\Local\Temp\v2\Monster Hunter World v20200109-v20200126 Plus 58 Trainer v2.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2564-0-0x00007FFA0F1E3000-0x00007FFA0F1E5000-memory.dmp

    Filesize

    8KB

    Download

  • memory/2564-1-0x00000286B5540000-0x00000286B5572000-memory.dmp

    Filesize

    200KB

    Download

  • memory/2564-2-0x00007FFA0F1E0000-0x00007FFA0FCA1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/2564-3-0x00007FFA0F1E0000-0x00007FFA0FCA1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/2564-6-0x00007FFA0F1E0000-0x00007FFA0FCA1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/2564-8-0x00007FFA0F1E0000-0x00007FFA0FCA1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/2564-9-0x00007FFA0F1E0000-0x00007FFA0FCA1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/2564-10-0x00007FFA0F1E0000-0x00007FFA0FCA1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/2564-11-0x00007FFA0F1E0000-0x00007FFA0FCA1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/2564-19-0x00007FFA0F1E3000-0x00007FFA0F1E5000-memory.dmp

    Filesize

    8KB

    Download

  • memory/2564-20-0x00007FFA0F1E0000-0x00007FFA0FCA1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/2564-21-0x00007FFA0F1E0000-0x00007FFA0FCA1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/2564-22-0x00007FFA0F1E0000-0x00007FFA0FCA1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/2564-23-0x00007FFA0F1E0000-0x00007FFA0FCA1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/2564-24-0x00007FFA0F1E0000-0x00007FFA0FCA1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/2564-25-0x00007FFA0F1E0000-0x00007FFA0FCA1000-memory.dmp

    Filesize

    10.8MB

    Download