Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-09-2024 05:00

General

  • Target

    修改器/Nioh 2 The Complete Edition v1.25-v1.28 Plus 35 Trainer.exe

  • Size

    1.4MB

  • MD5

    2e584ae1d797c1abcba6d816bae112cc

  • SHA1

    2aa3a7d0cb0979f552ee409252db027300d423de

  • SHA256

    5e402b9863dba15f4224dad633dad20f6ed38f69ad1f46fe9980484444a79ba1

  • SHA512

    61519f6804aa43d1033ade845552170795d2e9f7da86ad1e3c96ff0d8f6e667dfe76a078f0960849171fb82134c6aeced3b5699fbf29219d8e85c2006688748b

  • SSDEEP

    24576:endojDi6JdAEcWIP+7b+8Yq7OFiICUBZzbPbJ7bDSo9R:Q6J6XL+nYqkiRUBtV7Ff

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\修改器\Nioh 2 The Complete Edition v1.25-v1.28 Plus 35 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\修改器\Nioh 2 The Complete Edition v1.25-v1.28 Plus 35 Trainer.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/968-0-0x00007FF92DA03000-0x00007FF92DA05000-memory.dmp

    Filesize

    8KB

  • memory/968-1-0x000001F978570000-0x000001F9785AE000-memory.dmp

    Filesize

    248KB

  • memory/968-2-0x00007FF92DA00000-0x00007FF92E4C1000-memory.dmp

    Filesize

    10.8MB

  • memory/968-3-0x00007FF92DA00000-0x00007FF92E4C1000-memory.dmp

    Filesize

    10.8MB