Overview
overview
3Static
static
3Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...64.dll
windows7-x64
1Engine/Bin...64.dll
windows10-2004-x64
1Engine/Bin...me.dll
windows10-2004-x64
1MediocreMa...t2.exe
windows7-x64
1MediocreMa...t2.exe
windows10-2004-x64
1MediocreMa...ng.exe
windows7-x64
1Analysis
-
max time kernel
138s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/06/2024, 09:55
Static task
static1
Behavioral task
behavioral1
Sample
Engine/Binaries/ThirdParty/NVIDIA/NVaftermath/Win64/GFSDK_Aftermath_Lib.x64.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Engine/Binaries/ThirdParty/NVIDIA/NVaftermath/Win64/GFSDK_Aftermath_Lib.x64.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
Engine/Binaries/ThirdParty/Ogg/Win64/VS2015/libogg_64.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Engine/Binaries/ThirdParty/Ogg/Win64/VS2015/libogg_64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Clothing_x64.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Clothing_x64.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Destructible_x64.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Destructible_x64.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Legacy_x64.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Legacy_x64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/ApexFramework_x64.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/ApexFramework_x64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/NvCloth_x64.dll
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/NvCloth_x64.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3Common_x64.dll
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3Common_x64.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3Cooking_x64.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3Cooking_x64.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3_x64.dll
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3_x64.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PxFoundation_x64.dll
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PxFoundation_x64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PxPvdSDK_x64.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PxPvdSDK_x64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbis_64.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbis_64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbisfile_64.dll
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbisfile_64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
Engine/Binaries/ThirdParty/Windows/DirectX/x64/WinPixEventRuntime.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral30
Sample
MediocreMapAssistant2.exe
Resource
win7-20240221-en
Behavioral task
behavioral31
Sample
MediocreMapAssistant2.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral32
Sample
MediocreMapAssistant2/Binaries/Win64/MediocreMapAssistant2-Win64-Shipping.exe
Resource
win7-20240508-en
General
-
Target
Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3Cooking_x64.dll
-
Size
240KB
-
MD5
0b6d32f8edeee4cd0455e0929aa8cd77
-
SHA1
7ce42ea626979dfbc6b9dd3928f2d35ccc4e2d9a
-
SHA256
4b7941801c62485e5e9899db33c4b545cf9e1cd018def9b9b245cc18c01b3a81
-
SHA512
b13e88a35a3b49c975f3b339bb33366fda7ba2d9351b49dbf1560d045d9cf3bfae8f4913a44b3825d006bc60f3d79f2573e5b71d09325214bc3d3c875715c6c3
-
SSDEEP
3072:JMK7GRW4uqnmOrUAs1QwZH46AxSBgm9u+0x29vPnhOCbQTalVKopK1:f7G7uqn5UAs1PZXi2gm9ux25vllV
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Engine\Binaries\ThirdParty\PhysX3\Win64\VS2015\PhysX3Cooking_x64.dll,#11⤵PID:4316
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2232 --field-trial-handle=3060,i,1774866140584649235,8085848018931772189,262144 --variations-seed-version /prefetch:81⤵PID:1156