42f3d0002035557254c90f9ac386ec33b071fbddab84394d23bba3baedc1ce9d

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
14-06-2024 12:11

Target

Monster Hunter World v20200109 Plus 22 Trainer.exe
Size

1.8MB
MD5

233df3e84b92511fc5b5180a8c12471a
SHA1

4e2e6c88c44ad2f74d0fdf23ea828130eec453f5
SHA256

4af609033a4b4c1bef11548482437c9aac48175cb285c9a2957a2e973bbc200b
SHA512

7a7a507a4671b42661f175df6686cb79fbdf1843cb063d876f3d3a2f74cbe22965c57e3ddb8a4f83b30e60ffc9365765a88578abd4c30e25c047172d06be55bf
SSDEEP

24576:KUXjsa+GK5834bgd0CYosMBXeOxkUZfIdaR0hW/boeynEKA/mcIyFnDSfWB:j+Gafg6CCMVeOxbZxkWjInW/lbF

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1724	Monster Hunter World v20200109 Plus 22 Trainer.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1724	Monster Hunter World v20200109 Plus 22 Trainer.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1724 wrote to memory of 2576	1724	Monster Hunter World v20200109 Plus 22 Trainer.exe	28
PID 1724 wrote to memory of 2576	1724	Monster Hunter World v20200109 Plus 22 Trainer.exe	28
PID 1724 wrote to memory of 2576	1724	Monster Hunter World v20200109 Plus 22 Trainer.exe	28

C:\Users\Admin\AppData\Local\Temp\Monster Hunter World v20200109 Plus 22 Trainer.exe
"C:\Users\Admin\AppData\Local\Temp\Monster Hunter World v20200109 Plus 22 Trainer.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1724
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1724 -s 840
  2⤵
  PID:2576

memory/1724-0-0x000007FEF5D13000-0x000007FEF5D14000-memory.dmp

Filesize
4KB

Download
memory/1724-1-0x0000000001FF0000-0x0000000002022000-memory.dmp

Filesize
200KB

Download
memory/1724-2-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

Filesize
9.9MB

Download
memory/1724-3-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

Filesize
9.9MB

Download
memory/1724-4-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

Filesize
9.9MB

Download
memory/1724-7-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

Filesize
9.9MB

Download
memory/1724-9-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

Filesize
9.9MB

Download
memory/1724-10-0x000007FEF5D13000-0x000007FEF5D14000-memory.dmp

Filesize
4KB

Download
memory/1724-11-0x000007FEF5D10000-0x000007FEF66FC000-memory.dmp

Filesize
9.9MB

Download