Overview

overview

10

Static

static

10

Content.Wa...ty.dll

windows7-x64

1

Content.Wa...ty.dll

windows10-2004-x64

1

Content.Wa...er.dll

windows7-x64

1

Content.Wa...er.dll

windows10-2004-x64

1

Content.Wa...me.dll

windows7-x64

1

Content.Wa...me.dll

windows10-2004-x64

1

Content.Wa...me.dll

windows7-x64

1

Content.Wa...me.dll

windows10-2004-x64

1

Content.Wa...et.dll

windows7-x64

1

Content.Wa...et.dll

windows10-2004-x64

1

Content.Wa...ib.dll

windows7-x64

1

Content.Wa...ib.dll

windows10-2004-x64

1

Content.Wa...rd.dll

windows7-x64

1

Content.Wa...rd.dll

windows10-2004-x64

1

Content.Wa...ld.dll

windows7-x64

1

Content.Wa...ld.dll

windows10-2004-x64

1

Content.Wa...me.dll

windows7-x64

1

Content.Wa...me.dll

windows10-2004-x64

1

Content.Wa...rp.dll

windows7-x64

1

Content.Wa...rp.dll

windows10-2004-x64

1

Content.Wa...In.dll

windows7-x64

1

Content.Wa...In.dll

windows10-2004-x64

1

Content.Wa...on.dll

windows7-x64

1

Content.Wa...on.dll

windows10-2004-x64

1

Content.Wa...dk.dll

windows7-x64

1

Content.Wa...dk.dll

windows10-2004-x64

1

Content.Wa...ed.dll

windows7-x64

1

Content.Wa...ed.dll

windows10-2004-x64

1

Content.Wa...pv.dll

windows7-x64

1

Content.Wa...pv.dll

windows10-2004-x64

1

Content.Wa...on.dll

windows7-x64

1

Content.Wa...on.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    104s
  • max time network
    205s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-04-2024 22:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Content.Warning.v1.9.b-0xdeadc0de/Content Warning_Data/Plugins/x86_64/discord_game_sdk.dll

  • Size

    3.7MB

  • MD5

    a70393adb60ba6f2e55aef6e6fdd18da

  • SHA1

    5bd9ad15ecf6a60f0a2ebccad8a890e792f0e021

  • SHA256

    e95e8d46087b846396c340b299fc20295a9aa79e328d2265e45d05ddc8782a0e

  • SHA512

    f0d66508699106008ae3296cf5b795ee83e99152267863bd4062321f2646ddfe99c9bd52922ab410aeba45b0a7c24c4f525bed6938dcf1a702c6d6edea74d13d

  • SSDEEP

    49152:Er3bGelmX4fb86zSY14Bwc9yQkqdvca0psNH0MUpDWxjupPfHS2XSgRenP8H9cso:/t2Wano+vp

Score
1/10

Malware Config

Signatures

  • Modifies registry class 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Content.Warning.v1.9.b-0xdeadc0de\Content Warning_Data\Plugins\x86_64\discord_game_sdk.dll",#1
    1⤵
    • Modifies registry class
    PID:4368
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads