ba4cb197c1dea9ab943fe54eabe7ac969e8bedc64c91bf1e9813464d4a6fc744

Analysis

max time kernel
67s
max time network
85s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
20/03/2023, 21:43

Target

OpenGL 2.1/discord_game_sdk.dll
Size

3.7MB
MD5

d8cc567718550ae35c1566c3315b90df
SHA1

e5d8120a8a8583fe7e3177ae7d8fe797c002f263
SHA256

527768710ddb0953fce5eb1700c2566b6451135d76f1d0610b63907cd5ba94c5
SHA512

5e1d72bbb466d032596147dd1a90f5ebcaa82d3d56ee7a0b1aa3a37d4bb42e1fcb510b269451a1b9c7f3b8a1c18b1c5f530b200f2fbbe2ec990b4e1c12e6f5e8
SSDEEP

49152:cxytJCv8RbSimYQSaKCZhYtOVt7CPjitem2vUkcWDnVf6OuBimHdXopJErae4/KC:lD400amm+8m4

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000_Classes\Local Settings	rundll32.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3424	OpenWith.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\OpenGL 2.1\discord_game_sdk.dll",#1
1⤵
- Modifies registry class
PID:4984

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:3424