Overview

overview

8

Static

static

3

JOYSTICK/X...ME.txt

windows7-x64

1

JOYSTICK/X...ME.txt

windows10-2004-x64

1

JOYSTICK/X...PI.dll

windows7-x64

1

JOYSTICK/X...PI.dll

windows10-2004-x64

1

JOYSTICK/X...PI.dll

windows7-x64

1

JOYSTICK/X...PI.dll

windows10-2004-x64

1

JOYSTICK/X...er.exe

windows7-x64

1

JOYSTICK/X...er.exe

windows10-2004-x64

1

JOYSTICK/X...er.log

windows7-x64

1

JOYSTICK/X...er.log

windows10-2004-x64

1

JOYSTICK/X...us.cat

windows7-x64

8

JOYSTICK/X...us.cat

windows10-2004-x64

8

JOYSTICK/X...us.inf

windows7-x64

1

JOYSTICK/X...us.inf

windows10-2004-x64

1

JOYSTICK/X...us.exe

windows7-x64

JOYSTICK/X...us.exe

windows10-2004-x64

JOYSTICK/X...us.exe

windows7-x64

JOYSTICK/X...us.exe

windows10-2004-x64

JOYSTICK/X...DX.dll

windows7-x64

1

JOYSTICK/X...DX.dll

windows10-2004-x64

1

JOYSTICK/X...ut.exe

windows7-x64

1

JOYSTICK/X...ut.exe

windows10-2004-x64

1

JOYSTICK/desktop.ini

windows7-x64

1

JOYSTICK/desktop.ini

windows10-2004-x64

1

JOYSTICK/x...ce.exe

windows7-x64

7

JOYSTICK/x...ce.exe

windows10-2004-x64

1

JOYSTICK/x...64.exe

windows7-x64

7

JOYSTICK/x...64.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    139s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-08-2023 22:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JOYSTICK/XOutput.v0.11/SlimDX.dll

  • Size

    3.2MB

  • MD5

    5ceb31a41198aeb359f32b17f796e405

  • SHA1

    8588293d01e8eabdc1031f9cc6eca3d267afeac2

  • SHA256

    5d3f892aafe7debbff365a6a00bccf760469068f2a76b775ec72d11fa4c1c1f4

  • SHA512

    08697abc450b24965e9b99a220f1d5eac401461051fb9c68e7f5e1e48c49a5f045c40496c6e57a7198c65917e0f00ee2068e3a1c3723267f49b2597c02a68586

  • SSDEEP

    49152:dabj5zUoBrR/tgD2wAKowwlBP1BMqUH8QRJsAW/eYfRx/LukJK3QJW67eIlTpVcq:dggZn

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\JOYSTICK\XOutput.v0.11\SlimDX.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3676
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\JOYSTICK\XOutput.v0.11\SlimDX.dll,#1
      2⤵
        PID:688

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads