Analysis

  • max time kernel
    140s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    06-09-2024 16:28

General

  • Target

    游戏万能修改器9.0/TrainerWizard.exe

  • Size

    6.6MB

  • MD5

    829a8342c5029ae1ee5bbe87ed02bd93

  • SHA1

    cff13625c7cfe2b1079aeb5d1c895bfc4ba13360

  • SHA256

    c68a3198dc78c65e1ef3418bba718c3252c1fa1f7b1d5f4de8e15879db36cae9

  • SHA512

    04e5d31a6709c4bcd645fd9010bd14533179e574ffdf21fe0533c6c9a388d14bf43ca5c8b26e0b0514aca688bfa86e5b02c5363cd01f0961a075eda6fb7391de

  • SSDEEP

    98304:M/0MwcnIpWSeQlKmidRvJYkcOIZum/+zXsUF47tGs6uA6LInHCjUFN:Ml0YPJzyJ2rsUS74XiLInHa6

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\游戏万能修改器9.0\TrainerWizard.exe
    "C:\Users\Admin\AppData\Local\Temp\游戏万能修改器9.0\TrainerWizard.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3008

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3008-0-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/3008-2-0x0000000000290000-0x00000000002A9000-memory.dmp

    Filesize

    100KB

  • memory/3008-1-0x0000000002740000-0x000000000283C000-memory.dmp

    Filesize

    1008KB

  • memory/3008-3-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/3008-4-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/3008-6-0x0000000002740000-0x000000000283C000-memory.dmp

    Filesize

    1008KB

  • memory/3008-5-0x0000000000400000-0x0000000000AA3000-memory.dmp

    Filesize

    6.6MB

  • memory/3008-7-0x0000000000290000-0x00000000002A9000-memory.dmp

    Filesize

    100KB