Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
26-09-2024 05:00
Behavioral task
behavioral1
Sample
100%游戏存档/双击我改签v0.5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
100%游戏存档/双击我改签v0.5.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
修改器/Nioh 2 The Complete Edition v1.25-v1.28 Plus 35 Trainer.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
修改器/Nioh 2 The Complete Edition v1.25-v1.28 Plus 35 Trainer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
修改器/目录.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
修改器/目录.exe
Resource
win10v2004-20240802-en
General
-
Target
修改器/Nioh 2 The Complete Edition v1.25-v1.28 Plus 35 Trainer.exe
-
Size
1.4MB
-
MD5
2e584ae1d797c1abcba6d816bae112cc
-
SHA1
2aa3a7d0cb0979f552ee409252db027300d423de
-
SHA256
5e402b9863dba15f4224dad633dad20f6ed38f69ad1f46fe9980484444a79ba1
-
SHA512
61519f6804aa43d1033ade845552170795d2e9f7da86ad1e3c96ff0d8f6e667dfe76a078f0960849171fb82134c6aeced3b5699fbf29219d8e85c2006688748b
-
SSDEEP
24576:endojDi6JdAEcWIP+7b+8Yq7OFiICUBZzbPbJ7bDSo9R:Q6J6XL+nYqkiRUBtV7Ff
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 968 Nioh 2 The Complete Edition v1.25-v1.28 Plus 35 Trainer.exe