Analysis
- max time kernel
150s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
21/03/2026, 15:00
General
- Target Resident Evil 3 v1.0-v20220613 Plus 20 Trainer.exe
- Size 1.2MB
- Sample260321-sdp41sfy8v
- SHA256 88a7ce087dc7f012fd1c9ff9f9713463161e91f1505afd82dedd3384cadf1fdf
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Resident Evil 3 v1.0-v20220613 Plus 20 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\Resident Evil 3 v1.0-v20220613 Plus 20 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4884-0-0x00000206E8E00000-0x00000206E8E10000-memory.dmp
memory/4884-1-0x00000206E8D50000-0x00000206E8D98000-memory.dmp
memory/4884-2-0x00000206E8E00000-0x00000206E8E10000-memory.dmp
memory/4884-3-0x00000206E8E00000-0x00000206E8E10000-memory.dmp
memory/4884-4-0x00000206E8E00000-0x00000206E8E10000-memory.dmp
memory/4884-6-0x00000206E8E00000-0x00000206E8E10000-memory.dmp
memory/4884-5-0x00000206E8E00000-0x00000206E8E10000-memory.dmp
memory/4884-22-0x00000206E8E00000-0x00000206E8E10000-memory.dmp
memory/4884-21-0x00000206E8E00000-0x00000206E8E10000-memory.dmp
memory/4884-23-0x00000206E8E00000-0x00000206E8E10000-memory.dmp
memory/4884-24-0x00000206E8E00000-0x00000206E8E10000-memory.dmp
memory/4884-25-0x00000206E8E00000-0x00000206E8E10000-memory.dmp
memory/4884-26-0x00000206E7380000-0x00000206E73B1000-memory.dmp
memory/4884-29-0x00000206E8E00000-0x00000206E8E10000-memory.dmp
memory/4884-28-0x00000206EE3C0000-0x00000206EE3D2000-memory.dmp
memory/4884-27-0x00000206E8DF0000-0x00000206E8DFC000-memory.dmp