e5c1bf3735bb9d1ecc2b962ec01426b92caa44432020f1fefafd23e9211ca647 | Triage

Analysis

max time kernel
110s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
26-05-2024 07:12

Sharing

Report Analysis Logs

General

Target

HydraMultiCheatV1/HydraInjection.dll
Size

1KB
MD5

4771eceef535f37366c646c096cdc7e4
SHA1

e864d14a33f22e11d4836e08fecf3640a6f011e2
SHA256

f8b52249b762f5c98e05c33ace6ebc4a25d0d78777c5fa9b4067eeb9b35f2437
SHA512

2907f5eed3d66b7924faab325b8d1b24466390fcdc9c14099a4ef61bcad5fb98a00f9488f22abfae35a423ecd5ae25d077643dd1a1328eec7c820be9b7f6880f

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

rundll32.exe

pid process

5100 rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\HydraMultiCheatV1\HydraInjection.dll,#1
1⤵
- Suspicious use of FindShellTrayWindow
PID:5100

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1340 --field-trial-handle=2244,i,11878111470816612087,2265290141962607370,262144 --variations-seed-version /prefetch:8
1⤵
PID:1336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads