Analysis
- user interaction
yes - max time kernel
75s - max time network
75s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
28/08/2026, 02:25
General
- Target Cyberpunk 2077 v2.0-v2.13 Plus 46 Trainer.exe
- Size 1.5MB
- Sample260828-cwp9qsstew
- SHA256 fb342eb237f6ec8ad4292249c97f2a84cb7625b22adfb89e17e16c6cc0fb11d3
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Cyberpunk 2077 v2.0-v2.13 Plus 46 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\Cyberpunk 2077 v2.0-v2.13 Plus 46 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5564-0-0x000002930AE10000-0x000002930AE44000-memory.dmp
memory/5564-1-0x00007FFD0990F000-0x00007FFD09910000-memory.dmp
memory/5564-2-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-3-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-4-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-5-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-6-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-7-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-8-0x000002930B4E0000-0x000002930B4E8000-memory.dmp
memory/5564-10-0x000002930B640000-0x000002930B64E000-memory.dmp
memory/5564-9-0x000002930B6B0000-0x000002930B6EE000-memory.dmp
memory/5564-13-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-15-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-16-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-17-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-18-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-19-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-20-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-21-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-22-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-23-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-24-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp
memory/5564-32-0x00007FFD09780000-0x00007FFD0A124000-memory.dmp