Overview
overview
3Static
static
3GameJamProjesi.exe
windows10-2004-x64
1GameJamPro...rp.dll
windows10-2004-x64
1GameJamPro...ts.dll
windows10-2004-x64
1GameJamPro...ne.dll
windows10-2004-x64
1GameJamPro...en.dll
windows10-2004-x64
1GameJamPro...ty.dll
windows10-2004-x64
1GameJamPro...on.dll
windows10-2004-x64
1GameJamPro...on.dll
windows10-2004-x64
1GameJamPro...re.dll
windows10-2004-x64
1GameJamPro...ns.dll
windows10-2004-x64
1GameJamPro...ta.dll
windows10-2004-x64
1GameJamPro...ng.dll
windows10-2004-x64
1GameJamPro...es.dll
windows10-2004-x64
1GameJamPro...em.dll
windows10-2004-x64
1GameJamPro...on.dll
windows10-2004-x64
1GameJamPro...tp.dll
windows10-2004-x64
1GameJamPro...cs.dll
windows10-2004-x64
1GameJamPro...on.dll
windows10-2004-x64
1GameJamPro...me.dll
windows10-2004-x64
1GameJamPro...ty.dll
windows10-2004-x64
1GameJamPro...ls.dll
windows10-2004-x64
1GameJamPro...ns.dll
windows10-2004-x64
1GameJamPro...nq.dll
windows10-2004-x64
1GameJamPro...ml.dll
windows10-2004-x64
1GameJamPro...em.dll
windows10-2004-x64
1GameJamPro...on.dll
windows10-2004-x64
1GameJamPro...es.dll
windows10-2004-x64
1GameJamPro...ng.dll
windows10-2004-x64
1GameJamPro...fe.dll
windows10-2004-x64
1GameJamPro...st.dll
windows10-2004-x64
1GameJamPro...em.dll
windows10-2004-x64
1GameJamPro...cs.dll
windows10-2004-x64
1Analysis
-
max time kernel
1782s -
max time network
1154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
20-11-2023 17:52
Static task
static1
Behavioral task
behavioral1
Sample
GameJamProjesi.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral2
Sample
GameJamProjesi_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
GameJamProjesi_Data/Managed/Boxophobic.Utils.Scripts.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral4
Sample
GameJamProjesi_Data/Managed/Cinemachine.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
GameJamProjesi_Data/Managed/DOTween.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral6
Sample
GameJamProjesi_Data/Managed/Mono.Security.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
GameJamProjesi_Data/Managed/System.ComponentModel.Composition.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral8
Sample
GameJamProjesi_Data/Managed/System.Configuration.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
GameJamProjesi_Data/Managed/System.Core.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral10
Sample
GameJamProjesi_Data/Managed/System.Data.DataSetExtensions.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
GameJamProjesi_Data/Managed/System.Data.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral12
Sample
GameJamProjesi_Data/Managed/System.Drawing.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
GameJamProjesi_Data/Managed/System.EnterpriseServices.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral14
Sample
GameJamProjesi_Data/Managed/System.IO.Compression.FileSystem.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
GameJamProjesi_Data/Managed/System.IO.Compression.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral16
Sample
GameJamProjesi_Data/Managed/System.Net.Http.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
GameJamProjesi_Data/Managed/System.Numerics.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral18
Sample
GameJamProjesi_Data/Managed/System.Runtime.Serialization.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
GameJamProjesi_Data/Managed/System.Runtime.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral20
Sample
GameJamProjesi_Data/Managed/System.Security.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
GameJamProjesi_Data/Managed/System.ServiceModel.Internals.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral22
Sample
GameJamProjesi_Data/Managed/System.Transactions.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
GameJamProjesi_Data/Managed/System.Xml.Linq.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral24
Sample
GameJamProjesi_Data/Managed/System.Xml.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
GameJamProjesi_Data/Managed/System.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral26
Sample
GameJamProjesi_Data/Managed/Unity.AI.Navigation.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral27
Sample
GameJamProjesi_Data/Managed/Unity.Animation.Rigging.DocCodeExamples.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral28
Sample
GameJamProjesi_Data/Managed/Unity.Animation.Rigging.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
GameJamProjesi_Data/Managed/Unity.Burst.Unsafe.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral30
Sample
GameJamProjesi_Data/Managed/Unity.Burst.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral31
Sample
GameJamProjesi_Data/Managed/Unity.InputSystem.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral32
Sample
GameJamProjesi_Data/Managed/Unity.Mathematics.dll
Resource
win10v2004-20231020-en
General
-
Target
GameJamProjesi_Data/Managed/Unity.Animation.Rigging.DocCodeExamples.dll
-
Size
5KB
-
MD5
6aa730d09e51576ca784dc196186f2ab
-
SHA1
75de7d43e6c4599e767059ed326950eac29116ed
-
SHA256
105caeb6bb1a5b0f8bf2bd67452e561e61c3d5cd375152711425a84a192728f6
-
SHA512
46048636573d1324a659a4d4eff04e976a80f64749d5d405b1d0afdff79f9e98679eba63cb0477ceab836268dc0fb08b7fefa3c829969d8bc1e40eeda9c550da
-
SSDEEP
48:6P2Ivly/hux7inQ6fzI2b/3x2muu7YZ+z1R+4QEYJFqllEO2FXiKIkb6dZLrQaD+:UvlUhux+nVPx2huZzieRxkEX7SGtG/R
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeManageVolumePrivilege 1784 svchost.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\GameJamProjesi_Data\Managed\Unity.Animation.Rigging.DocCodeExamples.dll,#11⤵PID:3552
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵PID:1472
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1784