Overview

overview

10

Static

static

10

The Last S...er.exe

windows7-x64

1

The Last S...er.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-09-2024 14:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    The Last Stand Aftermath v1.0 Plus 22 Trainer.exe

  • Size

    1.4MB

  • MD5

    6bb5411a9f60c6058070b3100b235f65

  • SHA1

    dd1cae6e1539a215eaaeb67ea2e8d93d3174f635

  • SHA256

    8b96cd0721a8a2e8c647632fb6aa9ad94b518366edec57ed388f32defd716f37

  • SHA512

    4bbb8bab6aa22908bfe97a2961eccb3fb66ce904386a2480bdeb4995f1b614645a0946fbffebd2519c5f611893f8509cc5b4a8f8630742b5379289a5ce2da57d

  • SSDEEP

    24576:IDyxkhn8MrTUD2FSOPf5gKV0QEKBDSAnZceREWLbJ74A9:bih8MMD2MImK0Q9PnG14V779

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\The Last Stand Aftermath v1.0 Plus 22 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\The Last Stand Aftermath v1.0 Plus 22 Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4192-0-0x00007FFE9E373000-0x00007FFE9E375000-memory.dmp

    Filesize

    8KB

    Download

  • memory/4192-1-0x00007FFE9E370000-0x00007FFE9EE31000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4192-2-0x000002CC8D310000-0x000002CC8D34E000-memory.dmp

    Filesize

    248KB

    Download

  • memory/4192-3-0x00007FFE9E370000-0x00007FFE9EE31000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4192-4-0x00007FFE9E370000-0x00007FFE9EE31000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4192-7-0x00007FFE9E370000-0x00007FFE9EE31000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4192-8-0x00007FFE9E370000-0x00007FFE9EE31000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4192-10-0x00007FFE9E370000-0x00007FFE9EE31000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4192-20-0x00007FFE9E370000-0x00007FFE9EE31000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4192-21-0x00007FFE9E370000-0x00007FFE9EE31000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4192-22-0x00007FFE9E370000-0x00007FFE9EE31000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4192-23-0x00007FFE9E370000-0x00007FFE9EE31000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4192-24-0x00007FFE9E370000-0x00007FFE9EE31000-memory.dmp

    Filesize

    10.8MB

    Download