Analysis
-
max time kernel
1700s -
max time network
1150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
20-11-2023 17:52
General
-
Target
GameJamProjesi_Data/Managed/System.ComponentModel.Composition.dll
-
Size
251KB
-
MD5
426ea1652ff4b12367a509035d571ad3
-
SHA1
6d7c58db25449f3396e0f088cc88f3b9e6726bf1
-
SHA256
e8f6998869bf8c17f28a387231a9a50c3ab88a3474bbad9595a637f32082210c
-
SHA512
f4e7deb8e732c66afb69a977cc80d94bad5328e5aa78000eae8703d7faa508fdf6f462cca5f421876bc7656e4c84d7f5fa40290d0d4f7abc4614cd325d766c7c
-
SSDEEP
6144:jkwkYfxuS0ZNORl1X1XYZGFU+22kUgUlAwU5e81hXJXee4jsURlXXMAX8O33iEP3:jkwkYfx8ZNCxL
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\GameJamProjesi_Data\Managed\System.ComponentModel.Composition.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5924ef57aca2ce04e17d65d542b3eca9d
SHA19f144fa4f32b1430bf8e6324a9c0a84f0e9d68dd
SHA25621f8491fb8cce58a32ab185df17dc7bfd7e955ddb4bb33c18f6bd4ebbcec12cd
SHA5123f93267df3a4340d71c43e37c8dda5e11f76090a00437132706f1eccb12a7a49c263194e7852c57b4c929c9eb9ee26237ca699b1d0c2cd7d89525eaf14097cf9
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB