Analysis
-
max time kernel
1712s -
max time network
1148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
20/11/2023, 17:52
General
-
Target
GameJamProjesi_Data/Managed/System.Data.DataSetExtensions.dll
-
Size
29KB
-
MD5
ecd2f1cfec2844401c3c79de8303cd9f
-
SHA1
1b406f2481b49b9fda5a1b7dde76182b08a6fc7f
-
SHA256
cbfd352e20b76046633e9f60598abcfe2089fefcecb1ee41529be1c2e9513c68
-
SHA512
6cf684ebdb68515acbd8e0903933e330efab4a046404626d641c17f53de5e436f3c36e432d53b7d8af9106d3a2577243f509507d886b66f6af760b813c308b13
-
SSDEEP
384:tEAjm7aELetOdc8l4LodMqokNv2Y2rsFKOlIcMYOxIsnRbli3ESmMadMkrVr5UhH:tcZC8Ll4LiMXkv2Y2Mcdqsj5Q
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\GameJamProjesi_Data\Managed\System.Data.DataSetExtensions.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD52920f4730150dbda33b014d5c768660e
SHA1e47a145ebd4c1df53c684ab70ff95aba004f7d7b
SHA2566cb3deef5fe30e62ab876fd3fe9407154eed7ed4e78270b93bb1dba9738486d9
SHA5128c8383a4e15c5e0daedab15aa0e20c28b59e7c412d02be3fb6a86934f967a744ab050bacb55be855c5a97a6d2ccf05b5cf13e4a57637ef90bcddd5a65c2067e3
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB