Overview

overview

7

Static

static

Twitch Mon...me.dll

windows10_x64

7

Twitch Mon...lf.dll

windows10_x64

1

Twitch Mon...er.exe

windows10_x64

3

Twitch Mon...47.dll

windows10_x64

1

Twitch Mon...er.dll

windows10_x64

1

Twitch Mon...GL.dll

windows10_x64

1

Twitch Mon...v2.dll

windows10_x64

3

Twitch Mon...re.dll

windows10_x64

1

Twitch Mon...4.nexe

windows10_x64

3

Twitch Mon...er.exe

windows10_x64

1

Twitch Mon...GL.dll

windows10_x64

1

Twitch Mon...v2.dll

windows10_x64

1

Twitch Mon...me.exe

windows10_x64

7

Twitch Mon...EGL.so

windows10_x64

Twitch Mon...Sv2.so

windows10_x64

3

Twitch Mon...g-mime

windows10_x64

1

Twitch Mon...ttings

windows10_x64

1

Twitch Mon...ib.dll

windows10_x64

1

Twitch Mon...es.dll

windows10_x64

1

Twitch Mon...es.dll

windows10_x64

1

Twitch Mon...ns.dll

windows10_x64

1

Twitch Mon...ns.dll

windows10_x64

1

Twitch Mon...ng.dll

windows10_x64

Twitch Mon...ns.dll

windows10_x64

1

Twitch Mon...es.dll

windows10_x64

1

Twitch Mon...rs.dll

windows10_x64

1

Twitch Mon...on.dll

windows10_x64

1

Twitch Mon...rp.dll

windows10_x64

1

Twitch Mon...ll.exe

windows10_x64

3

Twitch Mon...va.exe

windows10_x64

1

Twitch Mon...chrome

windows10_x64

1

Twitch Mon...andbox

windows10_x64

1

Analysis

  • max time kernel
    35s
  • max time network
    152s
  • platform
    windows10_x64
  • resource
    win10v20210408
  • submitted
    16-07-2021 11:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Twitch Monster/windows-chromium/90.0.4430.72/libGLESv2.dll

  • Size

    7.4MB

  • MD5

    19699d38eca17786da255fba12a6a5ba

  • SHA1

    af9559ab9b214d27723ae578263f838e659e5ca8

  • SHA256

    126787d95629d01c41bf663349456a0aebf8e59e6ce0deead9911abd6f5d7843

  • SHA512

    25b8855dcc66644c76992e24a6f5e4e0c5124be4dca03576fba1e690d54c3b820011c2d8437a785c9ddb920952f920c9862689ab3cd0b877c86cfa0715faa623

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Twitch Monster\windows-chromium\90.0.4430.72\libGLESv2.dll",#1
    1⤵
      PID:3144
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 3144 -s 284
        2⤵
        • Program crash
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1328

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads