Analysis
- max time kernel
150s - max time network
153s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
29/04/2026, 13:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GamerFunV5.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
GamerFunV5.exe
Resource
win11-20260130-en
3 signatures
150 seconds
General
- Target GamerFunV5.exe
- Size 68.7MB
- Sample260429-qye4facv71
- SHA256 15382b4b6309c0fc43d94448898bd91d271a97dd96e0b5714843a8af15c9f29c
- MD5 a9d92f414dbeb815274bbaaf2073a672
- SHA1 008ffc32e6fd21fcf1b92caab1e24a650aa14d18
- SHA512 d6b873fbb49a9d4a66a699d35a8c8a0bd73a96679aa2a9d6dc3e21039506a533872a7c650530724a7c9d16c48b3565f120420bcfa574f32ed8d16844ab340b3a
- SSDEEP 1572864:lPqH510JH+r0A2oxUpqsDBSCW3Z+ajjFrqwXMExDKnT7lLk:lPqH51mHuXyqO4C6+ajjFVxuflk
- TLSH T1F8F72356E2FD00E8D5BAC0B8C557552BE7B2345513309BEB66A48A692F33FE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 5108 GamerFunV5.exe - Suspicious behavior: EnumeratesProcesses 39 IoCs
pid Process 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe 5108 GamerFunV5.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5108 GamerFunV5.exe