Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-07-2024 17:51

General

  • Target

    Halo The Master Chief Collection (Halo CE Anniversary) v1.0-v20221219 Plus 13 Trainer.exe

  • Size

    1.4MB

  • MD5

    2228fc9baff42b17b27da3dd76d2eb27

  • SHA1

    50b764600b72a076b68c50073adcf2d130c0a1ac

  • SHA256

    797a5c03655c080542da9bd10623d0b77c92b04b36e047f7ac0cb792a87e2f02

  • SHA512

    237f0dfecf9d0a216669ce9a7aa3debe5659b60c8289b036402ddc2e7b73aa61c03b4dbd753552462b8c6033993b9b327801c18de6c214697381f27b4d7a1a8e

  • SSDEEP

    24576:Q4c9PPAFHpgUut2mekVDp8bI2SCIzyabDSVXT5XAIA4:cOpgN5eK8xSCIz1IXT5XAI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Halo The Master Chief Collection (Halo CE Anniversary) v1.0-v20221219 Plus 13 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\Halo The Master Chief Collection (Halo CE Anniversary) v1.0-v20221219 Plus 13 Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3508-0-0x00007FF9DBB33000-0x00007FF9DBB35000-memory.dmp

    Filesize

    8KB

  • memory/3508-3-0x00000247EC7C0000-0x00000247EC7F2000-memory.dmp

    Filesize

    200KB

  • memory/3508-6-0x00007FF9DBB30000-0x00007FF9DC5F1000-memory.dmp

    Filesize

    10.8MB

  • memory/3508-7-0x00007FF9DBB30000-0x00007FF9DC5F1000-memory.dmp

    Filesize

    10.8MB

  • memory/3508-8-0x00007FF9DBB30000-0x00007FF9DC5F1000-memory.dmp

    Filesize

    10.8MB

  • memory/3508-9-0x00007FF9DBB30000-0x00007FF9DC5F1000-memory.dmp

    Filesize

    10.8MB

  • memory/3508-10-0x00000247EE770000-0x00000247EE778000-memory.dmp

    Filesize

    32KB

  • memory/3508-12-0x00000247EE7C0000-0x00000247EE7CE000-memory.dmp

    Filesize

    56KB

  • memory/3508-11-0x00000247EE7F0000-0x00000247EE828000-memory.dmp

    Filesize

    224KB

  • memory/3508-13-0x00007FF9DBB30000-0x00007FF9DC5F1000-memory.dmp

    Filesize

    10.8MB

  • memory/3508-26-0x00007FF9DBB33000-0x00007FF9DBB35000-memory.dmp

    Filesize

    8KB

  • memory/3508-27-0x00007FF9DBB30000-0x00007FF9DC5F1000-memory.dmp

    Filesize

    10.8MB

  • memory/3508-28-0x00007FF9DBB30000-0x00007FF9DC5F1000-memory.dmp

    Filesize

    10.8MB

  • memory/3508-29-0x00007FF9DBB30000-0x00007FF9DC5F1000-memory.dmp

    Filesize

    10.8MB

  • memory/3508-30-0x00007FF9DBB30000-0x00007FF9DC5F1000-memory.dmp

    Filesize

    10.8MB

  • memory/3508-31-0x00007FF9DBB30000-0x00007FF9DC5F1000-memory.dmp

    Filesize

    10.8MB