Analysis
-
max time kernel
1778s -
max time network
1788s -
platform
windows11-21h2_x64 -
resource
win11-20240508-en -
resource tags
-
submitted
26-06-2024 21:55
General
-
Target
PC Building Simulator 2 v1.0-v1.6 Plus 9 Trainer.exe
-
Size
1.5MB
-
MD5
ac432710be3034102b6e8c410cef68d0
-
SHA1
e3860c3c4ad0e5cada323c0ea3da16ff8345b8a9
-
SHA256
6d24667f79a928f9c78e96ca0050113590d21dbd0180be145b88cd9f0e6855bb
-
SHA512
058932076551c3b73beb99c99055bd49de0d9063de645c0a8a9fce86d279dbff1fe1b2244c60f18fac1e981f9b8502ec4fa3f51b90584e4e26e17b69cf06e050
-
SSDEEP
24576:49l/xuBpt6eBtKWxSvwR8FQ8NQo0wngODSVXT5Xwdsrya3AWOE:Ulit68K4Sv+8TQ1XT5X4sr1w4
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 4 IoCs
-
Runs net.exe
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PC Building Simulator 2 v1.0-v1.6 Plus 9 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\PC Building Simulator 2 v1.0-v1.6 Plus 9 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵
-
C:\Windows\System32\oobe\UserOOBEBroker.exeC:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding1⤵
- Drops file in Windows directory
-
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exeC:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k netsvcs -s LxpSvc1⤵
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\net.exenet user Admin *2⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\net1.exeC:\Windows\system32\net1 user Admin *3⤵
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
208KB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
32KB
-
Filesize
56KB
-
Filesize
224KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB