Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 07:11
General
-
Target
warhammer_40000_Space_Marine_v1.0.54_Trainer_5/WH_40K_Space_Marine_Plus_5_Trainer.exe
-
Size
201KB
-
MD5
62d990c26d981f2613c08ad8d079729c
-
SHA1
4a8bdb41ed3f16cf6efe5d1697c982308ce04ee8
-
SHA256
4c1bee6cd1a6c7fe8ad4fe3e889ffd0d4050a1230b97ac2907b90d49b164c60f
-
SHA512
769fe78ab557f98b7fca96716fc50158590e1c5968af2bcfc9e2680272cc6d46502278ad8528338c0c0d0d9b1cc62bbc0c22d9e06200b278f8b34668bbd096a5
-
SSDEEP
3072:GbGNjcn8mnsXHsR0v3giAA8vAmqmNQfUpHLRWbNsvFH1sMg2wNU0pqbjout:TNj2YhQFq0tLeNsvF19LKqXoS
Score
7/10
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\warhammer_40000_Space_Marine_v1.0.54_Trainer_5\WH_40K_Space_Marine_Plus_5_Trainer.exe"C:\Users\Admin\AppData\Local\Temp\warhammer_40000_Space_Marine_v1.0.54_Trainer_5\WH_40K_Space_Marine_Plus_5_Trainer.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x514 0x5101⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB
-
Filesize
908KB