Analysis
- max time kernel
117s - max time network
118s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
- submitted
07/09/2024, 12:12
General
- Target v2/Monster Hunter World v20200109-v20200205 Plus 66 Trainer v2.exe
- Size 1.8MB
- Sample240907-pdasjstdrl
- SHA256 3f58c0fb65c6353a7beddaf59aa5e86431b959f6eea8a05d2d20ee5c962978d2
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\v2\Monster Hunter World v20200109-v20200205 Plus 66 Trainer v2.exe"C:\Users\Admin\AppData\Local\Temp\v2\Monster Hunter World v20200109-v20200205 Plus 66 Trainer v2.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1968 -s 7962⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1968-0-0x000007FEF5DC3000-0x000007FEF5DC4000-memory.dmp
memory/1968-1-0x0000000000460000-0x0000000000492000-memory.dmp
memory/1968-2-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp
memory/1968-3-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp
memory/1968-4-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp
memory/1968-8-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp