Analysis
-
max time kernel
30s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
08-06-2023 02:31
General
-
Target
ARK Survival Evolved/ShooterGame/Binaries/Win64/steamclient64.dll
-
Size
928KB
-
MD5
fe567a0ac237324ee86a6714155f4f4a
-
SHA1
5d670d104f14327920126fd6f4d7bb5d9780e2b6
-
SHA256
a0f57b0d3d2a0e5b8ef707a9f8905a08869df9a0517c81ed285acab1bd624432
-
SHA512
4e2375a7d22bf41efa642afdfbe8c09e76e642136b404cbfa5efafa0c380714da37da95df4a17cc09db109e6ec53afcdf8a5b2b50d9f61a2ba5ab65d15dd0248
-
SSDEEP
12288:GXnhNhzgq0fPg/5xxl9BkF5tR0rp7J3/4:GXXhzgq8K/lnkF5Wd3A
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 5 IoCs
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\ARK Survival Evolved\ShooterGame\Binaries\Win64\steamclient64.dll",#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB