c15427a19da1db7b3f9e9544db6eceae3fc30c42d570fa8d56728db6cd6c5c22

Submit
Reports

Overview

overview

Static

static

Bread.and....le.dll

windows7-x64

Bread.and....le.dll

windows10-2004-x64

Bread.and....le.dll

windows7-x64

Bread.and....le.dll

windows10-2004-x64

Bread.and....le.dll

windows7-x64

Bread.and....le.dll

windows10-2004-x64

Bread.and....ne.dll

windows7-x64

Bread.and....ne.dll

windows10-2004-x64

Bread.and....ib.dll

windows7-x64

Bread.and....ib.dll

windows10-2004-x64

Bread.and....rd.dll

windows7-x64

Bread.and....rd.dll

windows10-2004-x64

Bread.and....ut.dll

windows7-x64

Bread.and....ut.dll

windows10-2004-x64

Bread.and....io.dll

windows7-x64

Bread.and....io.dll

windows10-2004-x64

Bread.and....oL.dll

windows7-x64

Bread.and....oL.dll

windows10-2004-x64

Bread.and....ed.dll

windows7-x64

Bread.and....ed.dll

windows10-2004-x64

Bread.and....io.dll

windows7-x64

Bread.and....io.dll

windows10-2004-x64

Bread.and....pi.dll

windows7-x64

Bread.and....pi.dll

windows10-2004-x64

Bread.and....pi.dll

windows7-x64

Bread.and....pi.dll

windows10-2004-x64

Bread.and....ut.dll

windows7-x64

Bread.and....ut.dll

windows10-2004-x64

Bread.and....io.dll

windows7-x64

Bread.and....io.dll

windows10-2004-x64

Bread.and....ed.dll

windows7-x64

Bread.and....ed.dll

windows10-2004-x64

Analysis

max time kernel
126s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20231025-en
resource tags

arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system
submitted
27/10/2023, 08:44

Sharing

Copy URL

Twitter E-mail

Static task

static1

xworm customerloader

4 signatures

Behavioral task

behavioral1

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Managed/UnityEngine.VirtualTexturingModule.dll

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Managed/UnityEngine.VirtualTexturingModule.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Managed/UnityEngine.WindModule.dll

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Managed/UnityEngine.WindModule.dll

Resource

win10v2004-20231025-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Managed/UnityEngine.XRModule.dll

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Managed/UnityEngine.XRModule.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Managed/UnityEngine.dll

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Managed/UnityEngine.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Managed/mscorlib.dll

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Managed/mscorlib.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Managed/netstandard.dll

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Managed/netstandard.dll

Resource

win10v2004-20231025-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/Rewired_DirectInput.dll

Resource

win7-20231020-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/Rewired_DirectInput.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/fmodstudio.dll

Resource

win7-20231020-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/fmodstudio.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/fmodstudioL.dll

Resource

win7-20231020-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/fmodstudioL.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/lib_burst_generated.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/lib_burst_generated.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/resonanceaudio.dll

Resource

win7-20231020-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/resonanceaudio.dll

Resource

win10v2004-20231025-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/steam_api.dll

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/steam_api.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/steam_api.dll

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/steam_api.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86_64/Rewired_DirectInput.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86_64/Rewired_DirectInput.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86_64/fmodstudio.dll

Resource

win7-20231025-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86_64/fmodstudio.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86_64/lib_burst_generated.dll

Resource

win7-20231020-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86_64/lib_burst_generated.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/resonanceaudio.dll
Size

678KB
MD5

695bcfd3dc9522461338e945a9749e07
SHA1

12c8c4ff33f89933f2413b5b12bee941391eaf7e
SHA256

f6588e24d03237ee37e90cbcf8a8311daef3151b4db02d82ed9596ef4b11a84b
SHA512

14a1e3cd40f18d6c4bad56450d8ef4ddbbb766dd577159b33d82221209dc2a6ec166b94031d3418b230dd984731bbc43ba4809d2012546b30130e42a3bcfee86
SSDEEP

12288:mw8AjRs+VwHmFw/v04a3O63JL8Wr3UEyJqzOz1Tc8NBiWSkDKQ7IWH9E1:X8AtDVwHmFw/c2WbUVqzOz1A7FIn7IWS

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2832 wrote to memory of 2300	2832	rundll32.exe	86
PID 2832 wrote to memory of 2300	2832	rundll32.exe	86
PID 2832 wrote to memory of 2300	2832	rundll32.exe	86

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Bread.and.Fred-GoldBerg\Bread&Fred_Data\Plugins\x86\resonanceaudio.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2832
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Bread.and.Fred-GoldBerg\Bread&Fred_Data\Plugins\x86\resonanceaudio.dll,#1
  2⤵
  PID:2300

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads