194e630f2fd9c92859ae610c7556ca6e3d252897ed7a5b3aa664114471fa21a0

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
29-05-2024 15:05

Target

v3/Monster Hunter World v20200109-v20200126 Plus 58 Trainer v3.exe
Size

1.8MB
MD5

a3d44ef06e45632a2eb4cd0374449b43
SHA1

20ce3ea101b49275d69b5bc2523a9d40c51999f4
SHA256

8be06bdbe0020b3e008c206beab47d9c3c391336d73b408289cb40522054abed
SHA512

f9593cae6ec42fa8d975e5e927a4e66a19eea8993c1c549a77f7a6809800ba4c316404a5f230e9e6c6d661daa8f8fe63a275dec0f724e15856d59c1c6771cd16
SSDEEP

24576:O3fwwVqJHB1cMJrjLtAAdtftPQOe/7oC76aPECkDtGQjnEdUaxVNDSfWB:IyBqofRAAjtQl7V/kwontar

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2356	Monster Hunter World v20200109-v20200126 Plus 58 Trainer v3.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2356	Monster Hunter World v20200109-v20200126 Plus 58 Trainer v3.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2356 wrote to memory of 2588	2356	Monster Hunter World v20200109-v20200126 Plus 58 Trainer v3.exe	28
PID 2356 wrote to memory of 2588	2356	Monster Hunter World v20200109-v20200126 Plus 58 Trainer v3.exe	28
PID 2356 wrote to memory of 2588	2356	Monster Hunter World v20200109-v20200126 Plus 58 Trainer v3.exe	28

C:\Users\Admin\AppData\Local\Temp\v3\Monster Hunter World v20200109-v20200126 Plus 58 Trainer v3.exe
"C:\Users\Admin\AppData\Local\Temp\v3\Monster Hunter World v20200109-v20200126 Plus 58 Trainer v3.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2356
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2356 -s 764
  2⤵
  PID:2588

memory/2356-0-0x000007FEF5C93000-0x000007FEF5C94000-memory.dmp

Filesize
4KB

Download
memory/2356-1-0x0000000000150000-0x0000000000182000-memory.dmp

Filesize
200KB

Download
memory/2356-2-0x000007FEF5C90000-0x000007FEF667C000-memory.dmp

Filesize
9.9MB

Download
memory/2356-3-0x000007FEF5C90000-0x000007FEF667C000-memory.dmp

Filesize
9.9MB

Download
memory/2356-4-0x000007FEF5C90000-0x000007FEF667C000-memory.dmp

Filesize
9.9MB

Download
memory/2356-7-0x000007FEF5C90000-0x000007FEF667C000-memory.dmp

Filesize
9.9MB

Download
memory/2356-9-0x000007FEF5C90000-0x000007FEF667C000-memory.dmp

Filesize
9.9MB

Download
memory/2356-10-0x000007FEF5C93000-0x000007FEF5C94000-memory.dmp

Filesize
4KB

Download