Overview
overview
10Static
static
3ExtremeInvaders.exe
windows7-x64
1ExtremeInvaders.exe
windows10-2004-x64
10ExtremeInv...ss.dll
windows7-x64
1ExtremeInv...ss.dll
windows10-2004-x64
3ExtremeInv...ed.dll
windows7-x64
1ExtremeInv...ed.dll
windows10-2004-x64
1GameAssembly.dll
windows7-x64
3GameAssembly.dll
windows10-2004-x64
3UnityCrash...64.exe
windows7-x64
1UnityCrash...64.exe
windows10-2004-x64
1UnityPlayer.dll
windows7-x64
1UnityPlayer.dll
windows10-2004-x64
1baselib.dll
windows7-x64
3baselib.dll
windows10-2004-x64
3Resubmissions
18-07-2023 14:28
230718-rs27fsca5y 10Analysis
-
max time kernel
141s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
18-07-2023 14:28
Static task
static1
Behavioral task
behavioral1
Sample
ExtremeInvaders.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ExtremeInvaders.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
ExtremeInvaders_Data/Plugins/x86_64/KS_Diagnostics_Process.dll
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
ExtremeInvaders_Data/Plugins/x86_64/KS_Diagnostics_Process.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
ExtremeInvaders_Data/Plugins/x86_64/lib_burst_generated.dll
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
ExtremeInvaders_Data/Plugins/x86_64/lib_burst_generated.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
GameAssembly.dll
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
GameAssembly.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
UnityCrashHandler64.exe
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
UnityCrashHandler64.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
UnityPlayer.dll
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
UnityPlayer.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
baselib.dll
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
baselib.dll
Resource
win10v2004-20230703-en
General
-
Target
GameAssembly.dll
-
Size
17.0MB
-
MD5
18104a476685582fa374bdf4cd8756b5
-
SHA1
b95e0c25707a522d4749888ac6415e8a7826080d
-
SHA256
6c35f2a0db92f4530f7f1c410da069400f2525b17b44bdc9637f68463cfc7b43
-
SHA512
192f82082079715a3488668bb8e6a09bc50885f48048e7d328cb727acfa2b241eed7b212ed97409c93c060a574a3decf59f5dbc87f186bc663899076b1bccf51
-
SSDEEP
196608:Dpb9YOta6Kfe1gQi5LTdMGYt/xIoto6ZZSQMdSVGnbfGPd4zD:DJta6Kfe1gQgLWGA/xIotoOrMsVGqa
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2220 2764 WerFault.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\GameAssembly.dll,#11⤵PID:2764
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2764 -s 5322⤵
- Program crash
PID:2220
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 2764 -ip 27641⤵PID:4604