Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-06-2024 19:54

General

  • Target

    Dolphin.exe

  • Size

    14.9MB

  • MD5

    9660ec7cddf093a1807cb25fe0946b8e

  • SHA1

    5986661c62d689380476db238d7c18fa37d1b616

  • SHA256

    19d5c382204d7e40a764e116967aec610f502b9be60b9d3b095073827aa93c66

  • SHA512

    5213c828d4f0742c3cde59ceea7b111a1402779602f09fa5e898083b07f2860bb33119f97741bc049fefc0cd745879d22a12dc37ece8e0dd8b308dcc84079755

  • SSDEEP

    196608:HgfH5UoUTKklTNrDatogipuoBvfU2+YOcfyOGXutM8/:A/5UomlTNMogipuoBvfU2bOevGeP/

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Dolphin.exe
    "C:\Users\Admin\AppData\Local\Temp\Dolphin.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1020
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\Documents\Dolphin Emulator\Config\Dolphin.ini

    Filesize

    2KB

    MD5

    2b25b81f41bd6e26245810f1e5caf99c

    SHA1

    45c05f89ca796328179360ff2d3bd8762d2156a2

    SHA256

    8836c15c10c7806a736bd1919f816bded06af901780d1a30ec6d5c47b269ce5f

    SHA512

    b28b8cc28b4b0f2febbc29b49efbe386792dca06f63f8fd298d07e1b8db8d44a99ed8c016ec3efc9f98c8665abba0afc82b6c60c1be127ba14ecf452578acc5b

  • C:\Users\Admin\Documents\Dolphin Emulator\Config\Dolphin.ini

    Filesize

    2KB

    MD5

    e08f43c25745f4561828fc959c6c604f

    SHA1

    78bba03783afdc994e0fcd6d480c7dbe666059bd

    SHA256

    a4883c4807720f441fe280a0e95cdec1fe5be9655624519a2d9e539e541e1d89

    SHA512

    40c3bb9c223a5e36597cbe0fa10cbf21b0d36cae28da8bea3a55fd33b1ea90b75a8c2b7715677c94a66f4b133d35516d9e1d11039b407fc7c9506aa533ca706a

  • C:\Users\Admin\Documents\Dolphin Emulator\Wii\shared2\sys\SYSCONF

    Filesize

    16KB

    MD5

    9473c879a5e51040e7a202b4538773a7

    SHA1

    3256c026284a24fb99d2ec1558d95db3b5dcc2e9

    SHA256

    a8ec1ec377ee3a3c93a27f74dadf9edf95112ce167fc23d1abdbeb4fa15eb179

    SHA512

    139dbb6648a1c8b7e5224e52ca8f8093f069b7d5f83e2b84099688b927eb77cb8445bc46f9da98ce56d3b883bfe8e38905b5e252c87a5295a334fc8b6890bff3

  • memory/1020-22-0x000000006B600000-0x000000006B69F000-memory.dmp

    Filesize

    636KB