Analysis
-
max time kernel
125s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
12-09-2024 16:31
Static task
static1
Behavioral task
behavioral1
Sample
鬼泣4:特别版全版本二十项修改器/Devil May Cry 4 Trainer BUILD02-ALI213.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
鬼泣4:特别版全版本二十项修改器/Devil May Cry 4 Trainer BUILD02-ALI213.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
鬼泣4:特别版全版本二十项修改器/游迅网.url
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
鬼泣4:特别版全版本二十项修改器/游迅网.url
Resource
win10v2004-20240802-en
General
-
Target
鬼泣4:特别版全版本二十项修改器/游迅网.url
-
Size
111B
-
MD5
1e73d11eb7965dda7e821b0d261600cf
-
SHA1
a781cb6a6eb203f0d19686e40ef1c8361ec22c23
-
SHA256
cde0b34adaa12cdc1a54e5d7ecf7a4875ffbafd69d6811c4e3f22344290f5c7a
-
SHA512
65325d5976db3f65ebf426a9cd4021d250a2bc43f6990996a2f553de08dc28e9a5b617decd9738f174de76c13e0cb047c634abbbd01a2047643c20fc9252429d
Malware Config
Signatures
Processes
-
C:\Windows\System32\rundll32.exe"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\鬼泣4:特别版全版本二十项修改器\游迅网.url1⤵PID:1448
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4072,i,1828333185976713750,7918646547767660928,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:81⤵PID:4408