Analysis

  • max time kernel
    150s
  • max time network
    73s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07-10-2024 14:51

General

  • Target

    Monster Hunter Rise v1.0-v20230420 Plus 20 Trainer.exe

  • Size

    1.3MB

  • MD5

    a2ea10a4ff76d1d9b797b35253f25210

  • SHA1

    e6487f8a69711b9d07ff5a1eb729bee1ac29bd41

  • SHA256

    b80e276e9ebfb8f6d77ec4ff185ff172d8e84c2f5eef450cb7eed4b37db67782

  • SHA512

    509c7b642e5b1db0c88b9670d084cfa2bb427018d90b54a8016335f9e174dc75da4601c0e63b6b9fbe6947bc4cf3750a48b6941e431398672f0eb82b8d921cf8

  • SSDEEP

    24576:mQW+S9Ngx5LF9RJn0AwWyEzujQDdkmDSVXT5XB0fUcvnGya:+Xgx5p9RRZtduXT5X3cvG1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Monster Hunter Rise v1.0-v20230420 Plus 20 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\Monster Hunter Rise v1.0-v20230420 Plus 20 Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2068-0-0x000007FEF5F53000-0x000007FEF5F54000-memory.dmp

    Filesize

    4KB

  • memory/2068-3-0x0000000002300000-0x0000000002334000-memory.dmp

    Filesize

    208KB

  • memory/2068-6-0x000007FEF5F50000-0x000007FEF693C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-7-0x000007FEF5F50000-0x000007FEF693C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-8-0x0000000000380000-0x000000000038A000-memory.dmp

    Filesize

    40KB

  • memory/2068-9-0x0000000000380000-0x000000000038A000-memory.dmp

    Filesize

    40KB

  • memory/2068-10-0x000007FEF5F50000-0x000007FEF693C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-29-0x000007FEF5F53000-0x000007FEF5F54000-memory.dmp

    Filesize

    4KB

  • memory/2068-30-0x000007FEF5F50000-0x000007FEF693C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-34-0x000007FEF5F50000-0x000007FEF693C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-35-0x000007FEF5F50000-0x000007FEF693C000-memory.dmp

    Filesize

    9.9MB