Analysis
- geolocation tags
- max time kernel
151s - max time network
113s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
21/07/2026, 22:45
General
- Target Merikas_FH5_Trainer_v685_421(STEAM_UWP).exe
- Size 72.1MB
- Sample260721-2pp3tsga74
- SHA256 cb1ac8a9757e0dc7382d01b9f7ebec05d6019dec8885f1a9c2bbedcefdc20d45
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Merikas_FH5_Trainer_v685_421(STEAM_UWP).exe"C:\Users\Admin\AppData\Local\Temp\Merikas_FH5_Trainer_v685_421(STEAM_UWP).exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/3468-5-0x000002720D510000-0x000002720D9A0000-memory.dmp
memory/3468-9-0x000002B2A60E0000-0x000002B2AB860000-memory.dmp
memory/3468-22-0x000002720CBA0000-0x000002720CBB0000-memory.dmp
memory/3468-18-0x000002720E1C0000-0x000002720E2D0000-memory.dmp
memory/3468-26-0x000002720E360000-0x000002720E3F0000-memory.dmp
memory/3468-70-0x000002720F0E0000-0x000002720F100000-memory.dmp
memory/3468-86-0x000002720F820000-0x000002720F830000-memory.dmp
memory/3468-82-0x000002720F160000-0x000002720F170000-memory.dmp
memory/3468-78-0x000002720F140000-0x000002720F150000-memory.dmp
memory/3468-74-0x000002720F120000-0x000002720F130000-memory.dmp
memory/3468-66-0x000002720F0C0000-0x000002720F0D0000-memory.dmp
memory/3468-38-0x000002720F4C0000-0x000002720F810000-memory.dmp
memory/3468-62-0x000002720F090000-0x000002720F0A0000-memory.dmp
memory/3468-58-0x000002720F080000-0x000002720F090000-memory.dmp
memory/3468-54-0x000002720F010000-0x000002720F020000-memory.dmp
memory/3468-50-0x000002720EFB0000-0x000002720EFC0000-memory.dmp
memory/3468-46-0x000002720D070000-0x000002720D080000-memory.dmp
memory/3468-42-0x000002720F040000-0x000002720F080000-memory.dmp
memory/3468-34-0x000002720CF40000-0x000002720CF60000-memory.dmp
memory/3468-30-0x000002720EF70000-0x000002720EFA0000-memory.dmp
memory/3468-14-0x000002720E9B0000-0x000002720EF70000-memory.dmp
memory/3468-101-0x000002720FDB0000-0x00000272100B0000-memory.dmp
memory/3468-109-0x000002720F9E0000-0x000002720F9F0000-memory.dmp
memory/3468-105-0x000002720F9A0000-0x000002720F9C0000-memory.dmp
memory/3468-133-0x00000272104E0000-0x0000027210500000-memory.dmp
memory/3468-141-0x0000027210640000-0x0000027210670000-memory.dmp
memory/3468-137-0x00000272105C0000-0x00000272105D0000-memory.dmp
memory/3468-129-0x000002720FAA0000-0x000002720FAB0000-memory.dmp
memory/3468-125-0x0000027210550000-0x00000272105A0000-memory.dmp
memory/3468-121-0x000002720FA80000-0x000002720FAA0000-memory.dmp
memory/3468-117-0x000002720FA00000-0x000002720FA10000-memory.dmp
memory/3468-113-0x000002720FA50000-0x000002720FA80000-memory.dmp
memory/3468-97-0x000002720F850000-0x000002720F880000-memory.dmp
memory/3468-93-0x000002720F900000-0x000002720F970000-memory.dmp
memory/3468-157-0x00000272106A0000-0x00000272106B0000-memory.dmp
memory/3468-153-0x0000027210AF0000-0x0000027210E60000-memory.dmp
memory/3468-149-0x000002720B280000-0x000002720B290000-memory.dmp
memory/3468-145-0x00000272105F0000-0x0000027210610000-memory.dmp
memory/3468-161-0x0000027210730000-0x0000027210770000-memory.dmp
memory/3468-165-0x0000027210F10000-0x0000027210F50000-memory.dmp
memory/3468-169-0x000002720B2D0000-0x000002720B2E0000-memory.dmp
memory/3468-173-0x0000027211050000-0x0000027211110000-memory.dmp
memory/3468-177-0x0000027210EB0000-0x0000027210EC0000-memory.dmp
memory/3468-189-0x0000027211130000-0x0000027211140000-memory.dmp
memory/3468-193-0x0000027211150000-0x0000027211160000-memory.dmp
memory/3468-202-0x00000272111C0000-0x00000272111E0000-memory.dmp
memory/3468-213-0x0000027211210000-0x0000027211220000-memory.dmp
memory/3468-229-0x00000272112D0000-0x00000272112E0000-memory.dmp
memory/3468-241-0x0000027211330000-0x0000027211340000-memory.dmp
memory/3468-245-0x0000027211340000-0x0000027211350000-memory.dmp
memory/3468-261-0x00000272113D0000-0x00000272113F0000-memory.dmp
memory/3468-257-0x00000272113B0000-0x00000272113C0000-memory.dmp
memory/3468-253-0x0000027211390000-0x00000272113A0000-memory.dmp
memory/3468-249-0x0000027211370000-0x0000027211380000-memory.dmp
memory/3468-237-0x0000027211310000-0x0000027211320000-memory.dmp
memory/3468-233-0x00000272112F0000-0x0000027211300000-memory.dmp
memory/3468-225-0x00000272112B0000-0x00000272112C0000-memory.dmp
memory/3468-221-0x0000027211230000-0x0000027211240000-memory.dmp
memory/3468-217-0x0000027211280000-0x00000272112B0000-memory.dmp
memory/3468-209-0x00000272111F0000-0x0000027211200000-memory.dmp
memory/3468-205-0x0000027211180000-0x0000027211190000-memory.dmp
memory/3468-197-0x0000027211170000-0x0000027211180000-memory.dmp
memory/3468-185-0x0000027210F70000-0x0000027210F90000-memory.dmp
memory/3468-181-0x0000027210770000-0x0000027210780000-memory.dmp