Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21-09-2024 14:17
General
-
Target
The Last Stand Aftermath v1.0 Plus 22 Trainer.exe
-
Size
1.4MB
-
MD5
6bb5411a9f60c6058070b3100b235f65
-
SHA1
dd1cae6e1539a215eaaeb67ea2e8d93d3174f635
-
SHA256
8b96cd0721a8a2e8c647632fb6aa9ad94b518366edec57ed388f32defd716f37
-
SHA512
4bbb8bab6aa22908bfe97a2961eccb3fb66ce904386a2480bdeb4995f1b614645a0946fbffebd2519c5f611893f8509cc5b4a8f8630742b5379289a5ce2da57d
-
SSDEEP
24576:IDyxkhn8MrTUD2FSOPf5gKV0QEKBDSAnZceREWLbJ74A9:bih8MMD2MImK0Q9PnG14V779
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\The Last Stand Aftermath v1.0 Plus 22 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\The Last Stand Aftermath v1.0 Plus 22 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2480 -s 7602⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB