Overview
overview
1Static
static
1lib/Mono.C...db.dll
windows10-2004-x64
lib/Mono.C...ks.dll
windows10-2004-x64
1lib/Mono.Cecil.dll
windows10-2004-x64
1lib/Mono.Nat.dll
windows10-2004-x64
1lib/MonoMo...ur.dll
windows10-2004-x64
1lib/MonoMod.Utils.dll
windows10-2004-x64
1lib/Newton...on.dll
windows10-2004-x64
1lib/NitroxClient.dll
windows10-2004-x64
1lib/Nitrox...ca.dll
windows10-2004-x64
1lib/NitroxModel.dll
windows10-2004-x64
1lib/NitroxPatcher.dll
windows10-2004-x64
1lib/Nitrox...ll.xml
windows10-2004-x64
1lib/NitroxServer.dll
windows10-2004-x64
1lib/Nitrox...ll.xml
windows10-2004-x64
1lib/Serilo...nc.dll
windows10-2004-x64
1lib/Serilo...le.dll
windows10-2004-x64
1lib/Serilo...ap.dll
windows10-2004-x64
1lib/Serilog.dll
windows10-2004-x64
1lib/System...rs.dll
windows10-2004-x64
1lib/System...on.dll
windows10-2004-x64
1lib/System...ol.dll
windows10-2004-x64
1lib/System.Memory.dll
windows10-2004-x64
1lib/System...rs.dll
windows10-2004-x64
1lib/System...fe.dll
windows10-2004-x64
1lib/System...ol.dll
windows10-2004-x64
1lib/System...ws.dll
windows10-2004-x64
1lib/ToastN...es.dll
windows10-2004-x64
1lib/ToastN...ns.dll
windows10-2004-x64
1lib/Window...er.dll
windows10-2004-x64
1lib/discor...dk.dll
windows10-2004-x64
1lib/dnlib.dll
windows10-2004-x64
1lib/protobuf-net.dll
windows10-2004-x64
1Analysis
-
max time kernel
88s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03-02-2023 18:19
Static task
static1
Behavioral task
behavioral1
Sample
lib/Mono.Cecil.Pdb.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral2
Sample
lib/Mono.Cecil.Rocks.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
lib/Mono.Cecil.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral4
Sample
lib/Mono.Nat.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
lib/MonoMod.RuntimeDetour.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral6
Sample
lib/MonoMod.Utils.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
lib/Newtonsoft.Json.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral8
Sample
lib/NitroxClient.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
lib/NitroxModel-Subnautica.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral10
Sample
lib/NitroxModel.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
lib/NitroxPatcher.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral12
Sample
lib/NitroxPatcher.dll.xml
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
lib/NitroxServer.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral14
Sample
lib/NitroxServer.dll.xml
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
lib/Serilog.Sinks.Async.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral16
Sample
lib/Serilog.Sinks.File.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
lib/Serilog.Sinks.Map.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral18
Sample
lib/Serilog.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
lib/System.Buffers.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral20
Sample
lib/System.Drawing.Common.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
lib/System.IO.FileSystem.AccessControl.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral22
Sample
lib/System.Memory.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral23
Sample
lib/System.Numerics.Vectors.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral24
Sample
lib/System.Runtime.CompilerServices.Unsafe.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral25
Sample
lib/System.Security.AccessControl.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral26
Sample
lib/System.Security.Principal.Windows.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral27
Sample
lib/ToastNotifications.Messages.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral28
Sample
lib/ToastNotifications.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
lib/WindowsFirewallHelper.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral30
Sample
lib/discord_game_sdk.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral31
Sample
lib/dnlib.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral32
Sample
lib/protobuf-net.dll
Resource
win10v2004-20221111-en
General
-
Target
lib/discord_game_sdk.dll
-
Size
3.3MB
-
MD5
4402cd4891c256ee40046c6092afdcbf
-
SHA1
914e01743c7591beb79a61417b262caeb23e2c20
-
SHA256
a6b6d7df00a58dc50248d91048578d0fe52182286b487ef89a961fd10467dbd1
-
SHA512
78da4181132a02d7d17ba4b2839018dc43d7d691c8bb01d34e5f7439df9c92951ce687e9487df158c44e764275b45d6800f6629ec2a175cc4ecdf868292291e5
-
SSDEEP
24576:Q/NGmO/w02OFM7zWIyjQYS2tBMPfL+8T14rbXojA4F8eEcu2sqhA+cGRlZVIH06R:3oOiaQAtBMPfCn/WDcGRxIU6iIdAk
Malware Config
Signatures
-
Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2971393436-602173351-1645505021-1000_Classes\Local Settings rundll32.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4108 OpenWith.exe