Analysis
-
max time kernel
150s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
21-09-2024 06:23
General
-
Target
The Last Stand Aftermath v1.0 Plus 22 Trainer.exe
-
Size
1.4MB
-
MD5
6bb5411a9f60c6058070b3100b235f65
-
SHA1
dd1cae6e1539a215eaaeb67ea2e8d93d3174f635
-
SHA256
8b96cd0721a8a2e8c647632fb6aa9ad94b518366edec57ed388f32defd716f37
-
SHA512
4bbb8bab6aa22908bfe97a2961eccb3fb66ce904386a2480bdeb4995f1b614645a0946fbffebd2519c5f611893f8509cc5b4a8f8630742b5379289a5ce2da57d
-
SSDEEP
24576:IDyxkhn8MrTUD2FSOPf5gKV0QEKBDSAnZceREWLbJ74A9:bih8MMD2MImK0Q9PnG14V779
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\The Last Stand Aftermath v1.0 Plus 22 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\The Last Stand Aftermath v1.0 Plus 22 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4228,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
248KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB