Analysis
-
max time kernel
436s -
max time network
458s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
19-04-2024 18:24
General
-
Target
Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/Newtonsoft.Json.dll
-
Size
675KB
-
MD5
d751086b7423fd5580b5e909b06217b9
-
SHA1
c1707b17df636cd6d4a804361fc6ead4ef9db5cf
-
SHA256
a56146202232958f46bd6a28b5a7da166aea123ee0d646735a46e5c341dfbf1f
-
SHA512
86655b59ad62664a35a30807cce7dc2c2be8f1ece235f35dc9031873d255dc6f13a22b55d0386becbe927f007a14a6d936ba3861d1103af8f2fe16aa0afebe11
-
SSDEEP
12288:aBNYm5IWx4AhnIqjCfP4bYaRLL0eglBmjV+0kRqQCB0jEIF:aBum5I24A5LYa5g1ByNyq5B0jzF
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Content.Warning.v1.9.b.Multiplayer\Content.Warning.v1.9.b.Multiplayer\Content Warning_Data\Managed\Newtonsoft.Json.dll",#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB