Overview

overview

10

Static

static

10

Halo The M...er.exe

windows7-x64

1

Halo The M...er.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    23-07-2024 17:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Halo The Master Chief Collection (Halo CE Anniversary) v1.0-v20221219 Plus 13 Trainer.exe

  • Size

    1.4MB

  • MD5

    2228fc9baff42b17b27da3dd76d2eb27

  • SHA1

    50b764600b72a076b68c50073adcf2d130c0a1ac

  • SHA256

    797a5c03655c080542da9bd10623d0b77c92b04b36e047f7ac0cb792a87e2f02

  • SHA512

    237f0dfecf9d0a216669ce9a7aa3debe5659b60c8289b036402ddc2e7b73aa61c03b4dbd753552462b8c6033993b9b327801c18de6c214697381f27b4d7a1a8e

  • SSDEEP

    24576:Q4c9PPAFHpgUut2mekVDp8bI2SCIzyabDSVXT5XAIA4:cOpgN5eK8xSCIz1IXT5XAI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Halo The Master Chief Collection (Halo CE Anniversary) v1.0-v20221219 Plus 13 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\Halo The Master Chief Collection (Halo CE Anniversary) v1.0-v20221219 Plus 13 Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2628-0-0x000007FEF5EE3000-0x000007FEF5EE4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2628-3-0x00000000003C0000-0x00000000003F2000-memory.dmp

    Filesize

    200KB

    Download

  • memory/2628-6-0x000007FEF5EE0000-0x000007FEF68CC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2628-7-0x000007FEF5EE0000-0x000007FEF68CC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2628-9-0x0000000000370000-0x000000000037A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2628-8-0x0000000000370000-0x000000000037A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2628-10-0x000007FEF5EE0000-0x000007FEF68CC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2628-36-0x000007FEF5EE3000-0x000007FEF5EE4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2628-37-0x000007FEF5EE0000-0x000007FEF68CC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2628-38-0x000007FEF5EE0000-0x000007FEF68CC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2628-39-0x0000000000370000-0x000000000037A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2628-40-0x0000000000370000-0x000000000037A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2628-41-0x000007FEF5EE0000-0x000007FEF68CC000-memory.dmp

    Filesize

    9.9MB

    Download