Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
26-09-2024 10:27
General
-
Target
2 修改器/Atelier Ryza 2 Lost Legends and the Secret Fairy v1.0 Plus 29 Trainer.exe
-
Size
1.3MB
-
MD5
2405b5b09da8fe3f5cb3cd2f985a1ac5
-
SHA1
af495de191b38b28ee257395ab7e6e7c8b7f9262
-
SHA256
3775456d9f810cdfec80a0bf3c8e20930792ed1140078a09df334268b24b2622
-
SHA512
ee42883bcf6e6ed0728c9004f3bac8a52b82c17bb6b94fd698e67cd76d10e7dda1a506a1eaedaabd45934248368d69deb40b139a5307d0203f38ce560bddef65
-
SSDEEP
24576:punFur9wu+b5Vq0xlIkP112fd7GSbJ7LDSM:F9wJNI0Mk91MdSSV7
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2 修改器\Atelier Ryza 2 Lost Legends and the Secret Fairy v1.0 Plus 29 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\2 修改器\Atelier Ryza 2 Lost Legends and the Secret Fairy v1.0 Plus 29 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2536 -s 8242⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
200KB
-
Filesize
200KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB