Overview
overview
4Static
static
3AssetStudi...ke.dll
windows7-x64
4AssetStudi...ke.dll
windows10-2004-x64
1AssetStudio.dll
windows7-x64
1AssetStudio.dll
windows10-2004-x64
1AssetStudi...er.dll
windows7-x64
1AssetStudi...er.dll
windows10-2004-x64
1AssetStudioGUI.exe
windows7-x64
1AssetStudioGUI.exe
windows10-2004-x64
1AssetStudioGUI.exe
windows7-x64
1AssetStudioGUI.exe
windows10-2004-x64
1AssetStudi...ty.dll
windows7-x64
1AssetStudi...ty.dll
windows10-2004-x64
1K4os.Compr...Z4.dll
windows7-x64
1K4os.Compr...Z4.dll
windows10-2004-x64
1Mono.Cecil.Mdb.dll
windows7-x64
1Mono.Cecil.Mdb.dll
windows10-2004-x64
1Mono.Cecil.Pdb.dll
windows7-x64
1Mono.Cecil.Pdb.dll
windows10-2004-x64
1Mono.Cecil.Rocks.dll
windows7-x64
1Mono.Cecil.Rocks.dll
windows10-2004-x64
1Mono.Cecil.dll
windows7-x64
1Mono.Cecil.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1OpenTK.Compute.dll
windows7-x64
1OpenTK.Compute.dll
windows10-2004-x64
1OpenTK.Core.dll
windows7-x64
1OpenTK.Core.dll
windows10-2004-x64
1OpenTK.Graphics.dll
windows7-x64
1OpenTK.Graphics.dll
windows10-2004-x64
1OpenTK.Input.dll
windows7-x64
1OpenTK.Input.dll
windows10-2004-x64
1Analysis
-
max time kernel
130s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
31-05-2024 22:06
Static task
static1
Behavioral task
behavioral1
Sample
AssetStudio.PInvoke.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
AssetStudio.PInvoke.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
AssetStudio.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
AssetStudio.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
AssetStudioFBXWrapper.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
AssetStudioFBXWrapper.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
AssetStudioGUI.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
AssetStudioGUI.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
AssetStudioGUI.exe
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
AssetStudioGUI.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
AssetStudioUtility.dll
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
AssetStudioUtility.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
K4os.Compression.LZ4.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
K4os.Compression.LZ4.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
Mono.Cecil.Mdb.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Mono.Cecil.Mdb.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
Mono.Cecil.Pdb.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Mono.Cecil.Pdb.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
Mono.Cecil.Rocks.dll
Resource
win7-20240419-en
Behavioral task
behavioral20
Sample
Mono.Cecil.Rocks.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
Mono.Cecil.dll
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
Mono.Cecil.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
Newtonsoft.Json.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
OpenTK.Compute.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
OpenTK.Compute.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
OpenTK.Core.dll
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
OpenTK.Core.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
OpenTK.Graphics.dll
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
OpenTK.Graphics.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
OpenTK.Input.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
OpenTK.Input.dll
Resource
win10v2004-20240426-en
General
-
Target
Mono.Cecil.Pdb.dll
-
Size
87KB
-
MD5
f100e5cf51ef9837af10b793f3ed8703
-
SHA1
713edb8aca42579319ec77eb392f5714c0731b32
-
SHA256
f5234d2a93e1e25a5ca703cadab9cd9f0218975f1a78ee6355c0a9d3978c5de0
-
SHA512
a9e5d15d854ba5f874e3160bed489cbf340f9bc847e52d1c03c82c3689c317c940ee3f92317513278a6f7ab5bbc9b2e5bd6259ab4e1e9dad4d74e7fdf08ea42e
-
SSDEEP
1536:3U2qJ+tTKzlXr+wHRsh3Sv8q+KdbEAoYKHNvzpS6u6faHC9e:E2y5+weh2+KSAiFzpO6CHC9e
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Mono.Cecil.Pdb.dll,#11⤵PID:3548
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4500,i,9746875443948590908,1444894342962555245,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:81⤵PID:3384