Analysis

  • max time kernel
    141s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-07-2024 20:31

General

  • Target

    HITMAN 3 v3.10 Plus 11 Trainer.exe

  • Size

    1.2MB

  • MD5

    f257a0e7008656f9e2fa44a8a14f8d0d

  • SHA1

    3469c35ce974b4c7f0531af5116266393779d903

  • SHA256

    0e99e5e385e731404a25342a226633594e160f2081bbe4c84a756186ea08a9e8

  • SHA512

    e9d9dbadd01ebfcf4ea40d49cbacaab4ac43faaa21c7c0a173032e1382eab52bcf18bc2d26c5618cdd4d7d3642581d5d08a48330551f51617e388ac88e5622ee

  • SSDEEP

    24576:vqbohPJKzB1hZXTAZqAovlj6U7wbJ7yDStJQ:bJAXZXcZYvXwV7XJ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\HITMAN 3 v3.10 Plus 11 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\HITMAN 3 v3.10 Plus 11 Trainer.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4564-0-0x00007FFC39403000-0x00007FFC39405000-memory.dmp

    Filesize

    8KB

  • memory/4564-1-0x000002209AB70000-0x000002209ABA2000-memory.dmp

    Filesize

    200KB

  • memory/4564-2-0x00007FFC39400000-0x00007FFC39EC1000-memory.dmp

    Filesize

    10.8MB

  • memory/4564-3-0x00007FFC39400000-0x00007FFC39EC1000-memory.dmp

    Filesize

    10.8MB

  • memory/4564-4-0x00007FFC39400000-0x00007FFC39EC1000-memory.dmp

    Filesize

    10.8MB