Analysis

  • max time kernel
    137s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-08-2024 03:47

General

  • Target

    Hollow Knight v1.5.68 Plus 11 Trainer.exe

  • Size

    1.6MB

  • MD5

    3134f7f217192edbcf704bf2310af360

  • SHA1

    76cd774d5b8cbd291b4ca1cd0b36550ee4a5493e

  • SHA256

    139129aca31da8a2adc0a79efbbe9460faf7e24e06e86c3f2b3740aa8cd836b8

  • SHA512

    45e60f8c4c57cb7d5cf4fff07ee39a987a49275da9edb0856b82ae44766595aca65fa2bdf1895c54275fd68412950b3e7eddebdf2ff601f5b001f795e1df6ab9

  • SSDEEP

    24576:OZpjkFTAE4w4JSSVCiWZwIEkE69peprjcMNnKDSJmJRbJ7mcx:Oq4w8f0iCE69pep8ESfV7mcx

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Hollow Knight v1.5.68 Plus 11 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\Hollow Knight v1.5.68 Plus 11 Trainer.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2260

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2260-1-0x000001A2A4660000-0x000001A2A469E000-memory.dmp

    Filesize

    248KB

  • memory/2260-0-0x00007FF973F33000-0x00007FF973F35000-memory.dmp

    Filesize

    8KB

  • memory/2260-2-0x00007FF973F30000-0x00007FF9749F1000-memory.dmp

    Filesize

    10.8MB

  • memory/2260-3-0x00007FF973F30000-0x00007FF9749F1000-memory.dmp

    Filesize

    10.8MB

  • memory/2260-4-0x00007FF973F30000-0x00007FF9749F1000-memory.dmp

    Filesize

    10.8MB