Overview

overview

7

Static

static

3

dolphin-x64-5.0.exe

windows10-1703-x64

7

$PLUGINSDI...ns.dll

windows10-1703-x64

3

$PLUGINSDI...LL.dll

windows10-1703-x64

3

$PLUGINSDI...em.dll

windows10-1703-x64

3

infinst.exe

windows10-1703-x64

4

xinput1_3.dll

windows10-1703-x64

1

xinput1_3.dll

windows10-1703-x64

1

$TEMP/dxre...UP.dll

windows10-1703-x64

4

$TEMP/dxre...UP.exe

windows10-1703-x64

4

$TEMP/dxre...32.dll

windows10-1703-x64

4

dxupdate.dll

windows10-1703-x64

3

$TEMP/vcre...64.exe

windows10-1703-x64

7

Dolphin.exe

windows10-1703-x64

6

OpenAL32.dll

windows10-1703-x64

1

Sys/GameSe...r2.ps1

windows10-1703-x64

1

Sys/GameSe...01.ps1

windows10-1703-x64

1

Analysis

  • max time kernel
    140s
  • max time network
    137s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    11-04-2024 18:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Dolphin.exe

  • Size

    14.9MB

  • MD5

    9660ec7cddf093a1807cb25fe0946b8e

  • SHA1

    5986661c62d689380476db238d7c18fa37d1b616

  • SHA256

    19d5c382204d7e40a764e116967aec610f502b9be60b9d3b095073827aa93c66

  • SHA512

    5213c828d4f0742c3cde59ceea7b111a1402779602f09fa5e898083b07f2860bb33119f97741bc049fefc0cd745879d22a12dc37ece8e0dd8b308dcc84079755

  • SSDEEP

    196608:HgfH5UoUTKklTNrDatogipuoBvfU2+YOcfyOGXutM8/:A/5UomlTNMogipuoBvfU2bOevGeP/

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Dolphin.exe
    "C:\Users\Admin\AppData\Local\Temp\Dolphin.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3040
  • C:\Windows\System32\GamePanel.exe
    "C:\Windows\System32\GamePanel.exe" 00000000000601EC /startuptips
    1⤵
      PID:4660
    • C:\Windows\System32\bcastdvr.exe
      "C:\Windows\System32\bcastdvr.exe" -ServerName:Windows.Media.Capture.Internal.BroadcastDVRServer
      1⤵
      • Drops desktop.ini file(s)
      PID:4904

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\Documents\Dolphin Emulator\Config\Dolphin.ini
      Filesize

      2KB

      MD5

      fdbfaebf28863348fed5b87e2d53b44d

      SHA1

      ee9f3b05ee6eb46a1c1485b689b3f7a2df7e05b9

      SHA256

      7084338ff63b67ceb1b4120adb663e56a0ed312cf66c8ec73e84fbba888111ff

      SHA512

      4ccc2809c140754875a5e80a54ae5fd0545452a9ecadd7c55f7a7cf8bd960bf2af6ade3a57129fd9461e5931741c97ada713e5d84f5892b383be657456d61797

      Download Submit

    • C:\Users\Admin\Documents\Dolphin Emulator\Config\Dolphin.ini
      Filesize

      2KB

      MD5

      69c10c13ee2033c547699faa68cc15b9

      SHA1

      e53bd95a16b91c3485f6bc22c68f109dc61c9998

      SHA256

      83fc6ea8cc842f1acd14a9f408d70e6afa779c1a985a74f8fdd0c200a5a76733

      SHA512

      b01e83f3c0cbbaa70a80267285ec01383918678713ae8451dfd8c7dd69f0991bc0f4363e2458f43460c8d090b4a46db9e496f78e0aad444cfa9c0007382f02e6

      Download Submit

    • C:\Users\Admin\Documents\Dolphin Emulator\Wii\shared2\sys\SYSCONF
      Filesize

      16KB

      MD5

      9473c879a5e51040e7a202b4538773a7

      SHA1

      3256c026284a24fb99d2ec1558d95db3b5dcc2e9

      SHA256

      a8ec1ec377ee3a3c93a27f74dadf9edf95112ce167fc23d1abdbeb4fa15eb179

      SHA512

      139dbb6648a1c8b7e5224e52ca8f8093f069b7d5f83e2b84099688b927eb77cb8445bc46f9da98ce56d3b883bfe8e38905b5e252c87a5295a334fc8b6890bff3

      Download Submit

    • C:\Users\Admin\Videos\Captures\desktop.ini
      Filesize

      190B

      MD5

      b0d27eaec71f1cd73b015f5ceeb15f9d

      SHA1

      62264f8b5c2f5034a1e4143df6e8c787165fbc2f

      SHA256

      86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2

      SHA512

      7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

      Download Submit

    • memory/3040-49-0x000000006B600000-0x000000006B69F000-memory.dmp

      Filesize

      636KB

      Download