Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31-08-2024 07:50

General

  • Target

    Marvels Spider Man Remastered v1.812-v1.831 Plus 27 Trainer.exe

  • Size

    1.2MB

  • MD5

    af5d660c756e081aba6dbbe7d219b58b

  • SHA1

    8a6d4169ca2fb8449be423ec9188ba6c7a933d40

  • SHA256

    86cfebf4baa87e20e7246e9e719139166e66dff4c498797c41d7dfc5c2db0b10

  • SHA512

    40db55c628fdac4a3f47e7010fa4d09dad7cb82f2e5c08f8303fc47e24ee0dde3768979387a6b6a5a1decf83d716e97045c4ba9b91502e9e86f42d04555dfc62

  • SSDEEP

    24576:UmTet5zv1ST7l/rCK3Fd/CTRcMmDSMm94bJ7:6PzgTB/rvVrMTqV7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Marvels Spider Man Remastered v1.812-v1.831 Plus 27 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\Marvels Spider Man Remastered v1.812-v1.831 Plus 27 Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:1148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1148-0-0x00007FFA830C3000-0x00007FFA830C5000-memory.dmp

    Filesize

    8KB

  • memory/1148-3-0x000002236F6A0000-0x000002236F6D2000-memory.dmp

    Filesize

    200KB

  • memory/1148-6-0x00007FFA830C0000-0x00007FFA83B81000-memory.dmp

    Filesize

    10.8MB

  • memory/1148-7-0x00007FFA830C0000-0x00007FFA83B81000-memory.dmp

    Filesize

    10.8MB

  • memory/1148-8-0x00007FFA830C0000-0x00007FFA83B81000-memory.dmp

    Filesize

    10.8MB

  • memory/1148-9-0x00007FFA830C0000-0x00007FFA83B81000-memory.dmp

    Filesize

    10.8MB

  • memory/1148-10-0x0000022371AE0000-0x0000022371AE8000-memory.dmp

    Filesize

    32KB

  • memory/1148-11-0x00007FFA830C0000-0x00007FFA83B81000-memory.dmp

    Filesize

    10.8MB

  • memory/1148-12-0x0000022371B60000-0x0000022371B98000-memory.dmp

    Filesize

    224KB

  • memory/1148-13-0x0000022371B30000-0x0000022371B3E000-memory.dmp

    Filesize

    56KB

  • memory/1148-28-0x00007FFA830C3000-0x00007FFA830C5000-memory.dmp

    Filesize

    8KB

  • memory/1148-29-0x00007FFA830C0000-0x00007FFA83B81000-memory.dmp

    Filesize

    10.8MB

  • memory/1148-30-0x00007FFA830C0000-0x00007FFA83B81000-memory.dmp

    Filesize

    10.8MB

  • memory/1148-31-0x00007FFA830C0000-0x00007FFA83B81000-memory.dmp

    Filesize

    10.8MB

  • memory/1148-32-0x00007FFA830C0000-0x00007FFA83B81000-memory.dmp

    Filesize

    10.8MB

  • memory/1148-33-0x00007FFA830C0000-0x00007FFA83B81000-memory.dmp

    Filesize

    10.8MB

  • memory/1148-34-0x00007FFA830C0000-0x00007FFA83B81000-memory.dmp

    Filesize

    10.8MB

  • memory/1148-38-0x00007FFA830C0000-0x00007FFA83B81000-memory.dmp

    Filesize

    10.8MB

  • memory/1148-39-0x00007FFA830C0000-0x00007FFA83B81000-memory.dmp

    Filesize

    10.8MB