Overview
overview
7Static
static
7Enter.the....ib.dll
windows10-2004-x64
1Enter.the....er.dll
windows10-2004-x64
1Enter.the....no.dll
windows10-2004-x64
1Enter.the....tor.js
windows10-2004-x64
3Enter.the....tor.js
windows10-2004-x64
3Enter.the....er.dll
windows10-2004-x64
1Enter.the....on.dll
windows10-2004-x64
1Enter.the....er.dll
windows10-2004-x64
1Enter.the....ne.dll
windows10-2004-x64
1Enter.the....ay.dll
windows10-2004-x64
1Enter.the....lo.dll
windows10-2004-x64
1Enter.the....ks.dll
windows10-2004-x64
1Enter.the....xy.dll
windows10-2004-x64
Enter.the....64.dll
windows10-2004-x64
1Enter.the....ue.dll
windows10-2004-x64
1Enter.the....ve.dll
windows10-2004-x64
1Enter.the....in.dll
windows10-2004-x64
1Enter.the....32.dll
windows10-2004-x64
1Enter.the....64.dll
windows10-2004-x64
1Enter.the....ad.dll
windows10-2004-x64
1Enter.the....20.dll
windows10-2004-x64
1Enter.the....20.dll
windows10-2004-x64
1Enter.the....pi.dll
windows10-2004-x64
1Enter.the....64.dll
windows10-2004-x64
1Enter.the....er.dll
windows10-2004-x64
1Enter.the....pi.dll
windows10-2004-x64
7Enter.the....pi.dll
windows10-2004-x64
1Enter.the....64.dll
windows10-2004-x64
7Enter.the....64.dll
windows10-2004-x64
1Enter.the....up.exe
windows10-2004-x64
7Enter.the....64.exe
windows10-2004-x64
7Enter.the....86.exe
windows10-2004-x64
7Analysis
-
max time kernel
88s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
02-05-2024 09:39
Behavioral task
behavioral1
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Managed/mscorlib.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral2
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Mono/EmbedRuntime/MonoPosixHelper.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Mono/EmbedRuntime/mono.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral4
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Mono/etc/mono/1.0/DefaultWsdlHelpGenerator.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Mono/etc/mono/2.0/DefaultWsdlHelpGenerator.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral6
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/AkFlanger.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/AkGuitarDistortion.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral8
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/AkHarmonizer.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/AkSoundEngine.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral10
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/AkStereoDelay.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/AkTremolo.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral12
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/CSteamworks.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/Galaxy.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral14
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/Galaxy64.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/GalaxyCSharpGlue.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral16
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/InControlNative.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/NintendoSDKPlugin.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral18
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/XInputInterface32.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral19
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/XInputInterface64.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral20
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/libScePad.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/msvcp120.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral22
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/msvcr120.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral23
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/steam_api.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral24
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/EtG_Data/Plugins/steam_api64.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral25
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/UnityPlayer.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral26
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/steam_api.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/steam_api.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral28
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/steam_api64.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral29
Sample
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/steam_api64.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral30
Sample
Enter.the.Gungeon.v2.1.9/_Redist/dxwebsetup.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
Enter.the.Gungeon.v2.1.9/_Redist/vcredist_x64.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral32
Sample
Enter.the.Gungeon.v2.1.9/_Redist/vcredist_x86.exe
Resource
win10v2004-20240419-en
General
-
Target
Enter.the.Gungeon.v2.1.9/Enter.the.Gungeon.v2.1.9/steam_api.dll
-
Size
182KB
-
MD5
a3eee0df77b658fc94231c94e511cce0
-
SHA1
c4ba8ef91b9f3712e83b54ddf24945e2c7fbed45
-
SHA256
0bdba265a140a963464b4fad889d7a8dede05aba8c914ab2e83026255b6a2f41
-
SHA512
a8425c611bae5cb7b269f6784d9a04ebe8ca2e8380df44139915fa7954d66e71120f14fae449754a4606c88a99acca595e3fff31ec9b461748e530f39802045f
-
SSDEEP
3072:heiF66iiDfkpH0bHZjKA1UZTFNy+9clddZICTirbavOH:EiF6DiDfkYHM7ARPdSCOgOH
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 3168 wrote to memory of 5024 3168 rundll32.exe rundll32.exe PID 3168 wrote to memory of 5024 3168 rundll32.exe rundll32.exe PID 3168 wrote to memory of 5024 3168 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Enter.the.Gungeon.v2.1.9\Enter.the.Gungeon.v2.1.9\steam_api.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Enter.the.Gungeon.v2.1.9\Enter.the.Gungeon.v2.1.9\steam_api.dll,#12⤵