Analysis
- max time kernel
150s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
15/07/2026, 23:21
General
- Target EARTH DEFENSE FORCE 6 Trainer.exe
- Size 1.4MB
- Sample260715-3cdppsfy5m
- SHA256 ccba56fff25eec9187a77955af72583269dcf46eb65d5bfe27a9fc911a7dcfab
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\EARTH DEFENSE FORCE 6 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\EARTH DEFENSE FORCE 6 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4960-1-0x000001F7DB200000-0x000001F7DB234000-memory.dmp
memory/4960-0-0x00007FFAC4E4F000-0x00007FFAC4E50000-memory.dmp
memory/4960-2-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-3-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-4-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-5-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-6-0x000001F7F8C90000-0x000001F7F8C98000-memory.dmp
memory/4960-7-0x000001F7F8D10000-0x000001F7F8D4E000-memory.dmp
memory/4960-8-0x000001F7F8CE0000-0x000001F7F8CEE000-memory.dmp
memory/4960-12-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-13-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-14-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-15-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-27-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-28-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-29-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-30-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-31-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-32-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-33-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-34-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp
memory/4960-35-0x00007FFAC4CC0000-0x00007FFAC5664000-memory.dmp