Analysis
-
max time kernel
150s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
22-09-2024 09:58
Behavioral task
behavioral1
Sample
修改器/Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
修改器/Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
修改器/Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe
-
Size
1.6MB
-
MD5
bcacc9b5f549ea9f84b329bb2fdf9293
-
SHA1
e5e6b61d29a99deb53d69ef72e1153bbf0beeb55
-
SHA256
eabc658deece003f4e76ef76fd0932a0a2d91e63725bb11daf07dc7052689b76
-
SHA512
86a385a22595129c3059c834a175c303b722f197a59a12bb96a96d01998ca0e8eff5a27552f4921745b7e015b98b4ad46b277099927af89249ce79b22b706483
-
SSDEEP
24576:2inUIrP+Zeb+NKgNqRB+uCny6Dorar3QrLamx4wlKDSVXT5Xzwya:2iZGXN3IB+Tny6cGlwlfXT5Xzw1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
Processes:
Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exepid process 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exedescription pid process Token: SeDebugPrivilege 3420 Resident Evil 4 v1.0-v20230424 Plus 36 Trainer.exe