Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    29/04/2026, 13:39

General

  • Target
    GamerFunV5.exe
  • Size 68.7MB
  • Sample260429-qye4facv71
  • SHA256 15382b4b6309c0fc43d94448898bd91d271a97dd96e0b5714843a8af15c9f29c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 39 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GamerFunV5.exe
    "C:\Users\Admin\AppData\Local\Temp\GamerFunV5.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:5108

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/5108-7-0x000001C4A1F00000-0x000001C4A2B90000-memory.dmp

        memory/5108-10-0x000001C4A3D10000-0x000001C4A4A00000-memory.dmp

        memory/5108-21-0x000001C4A0B10000-0x000001C4A0B30000-memory.dmp

        memory/5108-25-0x000001C4A0B60000-0x000001C4A0B80000-memory.dmp

        memory/5108-17-0x000001C4A4A00000-0x000001C4A4CE0000-memory.dmp

        memory/5108-29-0x000001C4A1100000-0x000001C4A1150000-memory.dmp

        memory/5108-33-0x000001C4A0C90000-0x000001C4A0CB0000-memory.dmp

        memory/5108-13-0x000001C4A0AE0000-0x000001C4A0B00000-memory.dmp

        memory/5108-41-0x000001C4A2F80000-0x000001C4A2FC0000-memory.dmp

        memory/5108-55-0x000002053B9A0000-0x000002053BB20000-memory.dmp

        memory/5108-71-0x000002053C140000-0x000002053C340000-memory.dmp

        memory/5108-75-0x000001C4A4F50000-0x000001C4A4FA0000-memory.dmp

        memory/5108-63-0x000002053BCF0000-0x000002053BE60000-memory.dmp

        memory/5108-59-0x000001C4A11F0000-0x000001C4A1200000-memory.dmp

        memory/5108-51-0x000001C4A2EA0000-0x000001C4A2ED0000-memory.dmp

        memory/5108-45-0x000001C4A1150000-0x000001C4A1170000-memory.dmp

        memory/5108-67-0x000001C4A2FC0000-0x000001C4A2FF0000-memory.dmp

        memory/5108-37-0x000001C4A11A0000-0x000001C4A11D0000-memory.dmp

        memory/5108-79-0x000001C4A4DD0000-0x000001C4A4DF0000-memory.dmp

        memory/5108-87-0x000001C4A2F60000-0x000001C4A2F70000-memory.dmp

        memory/5108-83-0x000002053F170000-0x000002053F230000-memory.dmp

        memory/5108-91-0x000002053F050000-0x000002053F070000-memory.dmp