Overview
overview
7Static
static
3ContentWarning.rar
windows10-2004-x64
3games/Cont...ng.exe
windows10-2004-x64
7xlbstealer.pyc
windows10-2004-x64
3games/Mono.Cecil.dll
windows10-2004-x64
1games/Mono...re.dll
windows10-2004-x64
1games/SkiaSharp.dll
windows10-2004-x64
1games/contentmod.dll
windows10-2004-x64
1Analysis
- max time kernel
233s - max time network
281s - platform
windows10-2004_x64 - resource
win10v2004-20240611-fr - resource tags
arch:x64arch:x86image:win10v2004-20240611-frlocale:fr-fros:windows10-2004-x64systemwindows - submitted
15/06/2024, 16:07
Behavioral task
behavioral1
Sample
ContentWarning.rar
Resource
win10v2004-20240611-fr
Behavioral task
behavioral2
Sample
games/ContentWarning.exe
Resource
win10v2004-20240508-fr
Behavioral task
behavioral3
Sample
xlbstealer.pyc
Resource
win10v2004-20240508-fr
Behavioral task
behavioral4
Sample
games/Mono.Cecil.dll
Resource
win10v2004-20240611-fr
Behavioral task
behavioral5
Sample
games/MonoMod.Core.dll
Resource
win10v2004-20240611-fr
Behavioral task
behavioral6
Sample
games/SkiaSharp.dll
Resource
win10v2004-20240508-fr
Behavioral task
behavioral7
Sample
games/contentmod.dll
Resource
win10v2004-20240611-fr
General
- Target games/contentmod.dll
- Size 63KB
- Sample240615-tk35wszglm
- SHA256 09ecc2b85dc12b062df8b7dcd5ef2c3b3e50d04cbbfd8c7df92a6f799f34ecc8
- MD5 d145b9e038d5008d2495adec5686640d
- SHA1 0d0d3743190f7a6c7e0db8e0607a6f64de41fef1
- SHA512 b993fd3132dedaed8f16965ccf0c6efbd55fe811bbfe4ae55a8ad3a54a143a56c092313ffe9b8ae18bea00bf6be7ec343b509dbb3a674afb8f0061b1dd3c245d
- SSDEEP 768:tlylCrLKVElBjTCcYdSxCfY2Xw7jdhV9JHHxRM3iARkVMkgHS/BZrdA3jx5iaYTY:tQRACfY2avV9JHI3TRkVfv/nr4PRf
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\games\contentmod.dll,#11⤵PID:4504
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=fr --service-sandbox-type=asset_store_service --field-trial-handle=4120,i,10396174070534484291,16927015903193884554,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:81⤵PID:1968