Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
11/08/2026, 04:39
General
- Target 第一狂战士卡赞修改器_v1.0-v20250801.exe
- Size 1.7MB
- Sample260811-e9zrfagj4s
- SHA256 92870171d8847a56c008edde5af040af75b09b567cd749b610e7784cf7b41917
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\第一狂战士卡赞修改器_v1.0-v20250801.exe"C:\Users\Admin\AppData\Local\Temp\第一狂战士卡赞修改器_v1.0-v20250801.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5408-1-0x0000022251B70000-0x0000022251BA6000-memory.dmp
memory/5408-0-0x000002225273C000-0x000002225273D000-memory.dmp
memory/5408-2-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-3-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-4-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-5-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-6-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-7-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-8-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-9-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-10-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-11-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-12-0x000002226FBB0000-0x000002226FBB8000-memory.dmp
memory/5408-14-0x000002226FC00000-0x000002226FC0E000-memory.dmp
memory/5408-13-0x000002226FC30000-0x000002226FC6E000-memory.dmp
memory/5408-15-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-20-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-21-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-22-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-23-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-24-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-25-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-26-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-27-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-28-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-29-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-30-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-31-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-32-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-33-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-34-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-35-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-36-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-37-0x0000022251FA0000-0x0000022252944000-memory.dmp
memory/5408-38-0x0000022251FA0000-0x0000022252944000-memory.dmp