Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
26-09-2024 15:06
General
-
Target
修改器/Nioh 2 The Complete Edition v1.25-v1.28 Plus 35 Trainer.exe
-
Size
1.4MB
-
MD5
2e584ae1d797c1abcba6d816bae112cc
-
SHA1
2aa3a7d0cb0979f552ee409252db027300d423de
-
SHA256
5e402b9863dba15f4224dad633dad20f6ed38f69ad1f46fe9980484444a79ba1
-
SHA512
61519f6804aa43d1033ade845552170795d2e9f7da86ad1e3c96ff0d8f6e667dfe76a078f0960849171fb82134c6aeced3b5699fbf29219d8e85c2006688748b
-
SSDEEP
24576:endojDi6JdAEcWIP+7b+8Yq7OFiICUBZzbPbJ7bDSo9R:Q6J6XL+nYqkiRUBtV7Ff
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\修改器\Nioh 2 The Complete Edition v1.25-v1.28 Plus 35 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\修改器\Nioh 2 The Complete Edition v1.25-v1.28 Plus 35 Trainer.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2596 -s 8322⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB