Analysis
-
max time kernel
150s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
14-11-2024 15:54
Behavioral task
behavioral1
Sample
Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe
-
Size
2.0MB
-
MD5
95779e3dfdb1913709206febfa60d5cf
-
SHA1
2eeb7300f46a929dd73fc303d018dbc2bafee3a9
-
SHA256
bedecf37fe86e0167b104c921b630ab8f842925b2f2018e4080c530a2e4f8ce0
-
SHA512
d28db83d7d495635f9bd6c9a71e385339ad4098bc2bdfbfdbf79701fbee9ecd180c425c2a906f45d5cb49d88aaf129ae397b2df23b4abf93e1f87dc3a8b045ff
-
SSDEEP
49152:7pwbbZRnVbeJ7HPHqWNXR+XT5XGLpoOE4I1:C/KJ7p1MD52L+OHI1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe Token: SeDebugPrivilege 2516 Magicraft Early Access Plus 12 Trainer Updated 2024.03.15.exe