Overview
overview
3Static
static
3Murder.Hou...SE.exe
windows7-x64
1Murder.Hou...SE.exe
windows10-2004-x64
1Murder.Hou...ss.dll
windows7-x64
1Murder.Hou...ss.dll
windows10-2004-x64
1Murder.Hou...rp.dll
windows7-x64
1Murder.Hou...rp.dll
windows10-2004-x64
1Murder.Hou...rt.dll
windows7-x64
1Murder.Hou...rt.dll
windows10-2004-x64
1Murder.Hou...en.dll
windows7-x64
1Murder.Hou...en.dll
windows10-2004-x64
1Murder.Hou...rt.dll
windows7-x64
1Murder.Hou...rt.dll
windows10-2004-x64
1Murder.Hou...rp.dll
windows7-x64
1Murder.Hou...rp.dll
windows10-2004-x64
1Murder.Hou...rt.dll
windows7-x64
1Murder.Hou...rt.dll
windows10-2004-x64
1Murder.Hou...ib.dll
windows7-x64
1Murder.Hou...ib.dll
windows10-2004-x64
1Murder.Hou...rt.dll
windows7-x64
1Murder.Hou...rt.dll
windows10-2004-x64
1Murder.Hou...ty.dll
windows7-x64
1Murder.Hou...ty.dll
windows10-2004-x64
1Murder.Hou...on.dll
windows7-x64
1Murder.Hou...on.dll
windows10-2004-x64
1Murder.Hou...ri.dll
windows7-x64
1Murder.Hou...ri.dll
windows10-2004-x64
1Murder.Hou...y5.dll
windows7-x64
1Murder.Hou...y5.dll
windows10-2004-x64
1Murder.Hou...y5.dll
windows7-x64
1Murder.Hou...y5.dll
windows10-2004-x64
1Murder.Hou...re.dll
windows7-x64
1Murder.Hou...re.dll
windows10-2004-x64
1Analysis
-
max time kernel
289s -
max time network
322s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
30/06/2024, 03:14
Static task
static1
Behavioral task
behavioral1
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/Assembly-CSharp.dll
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/ConsoleUtilsImport.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/ConsoleUtilsImport.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/DOTween.dll
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/DOTween.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/DataPlatformImport.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/DataPlatformImport.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/GalaxyCSharp.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/GalaxyCSharp.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/GamepadImport.dll
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/GamepadImport.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/KdTreeLib.dll
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/KdTreeLib.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/MarketplaceImport.dll
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/MarketplaceImport.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral21
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/Mono.Security.dll
Resource
win7-20240611-en
Behavioral task
behavioral22
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/Mono.Security.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/Newtonsoft.Json.dll
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/Newtonsoft.Json.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/Poly2Tri.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/Poly2Tri.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/ProBuilderCore-Unity5.dll
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/ProBuilderCore-Unity5.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral29
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/ProBuilderMeshOps-Unity5.dll
Resource
win7-20240611-en
Behavioral task
behavioral30
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/ProBuilderMeshOps-Unity5.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/Rewired_Core.dll
Resource
win7-20240611-en
Behavioral task
behavioral32
Sample
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE_Data/Managed/Rewired_Core.dll
Resource
win10v2004-20240611-en
General
-
Target
Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE.exe
-
Size
638KB
-
MD5
bf12cb5b007f90791ebb88023104791d
-
SHA1
be3be5e2fbb9a7d44d384da58c15fbee703f6ded
-
SHA256
f286939df03466307a2084d6059257954d5ca74107c6488a891c8b776fb37754
-
SHA512
488759dcb5fa9be8e37505289daf343b6de5b738cf1e0d5eea5db04b5dbb020de76e95f41ce7c94e15719bddfbaa50c768dcb2398107c810472ed1c91f8eab47
-
SSDEEP
12288:O4eCZJN9w7qpJlFRyI+BPvhUCCE2gfpvW2d2AOjABh8x:JPNXpJlytP2CCE2gflW1RYhM
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 54 IoCs
pid Process 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 888 taskmgr.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 888 taskmgr.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe -
Suspicious use of SendNotifyMessage 64 IoCs
pid Process 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe 888 taskmgr.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2436 MURDER HOUSE.exe 2436 MURDER HOUSE.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2436 wrote to memory of 2440 2436 MURDER HOUSE.exe 28 PID 2436 wrote to memory of 2440 2436 MURDER HOUSE.exe 28 PID 2436 wrote to memory of 2440 2436 MURDER HOUSE.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\Murder.House.v1.0.2\Murder.House.v1.0.2\MURDER HOUSE.exe"C:\Users\Admin\AppData\Local\Temp\Murder.House.v1.0.2\Murder.House.v1.0.2\MURDER HOUSE.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2436 -
C:\Users\Admin\AppData\Local\Temp\Murder.House.v1.0.2\Murder.House.v1.0.2\UnityCrashHandler64.exe"C:\Users\Admin\AppData\Local\Temp\Murder.House.v1.0.2\Murder.House.v1.0.2\UnityCrashHandler64.exe" --attach 2436 10526722⤵PID:2440
-
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:888
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72B
MD5ed3f5506e9d3b3326adcbf57f8e431e9
SHA1adc67d2be4c677b1479eb33194b7ae5bc0c94685
SHA2567523544bc385ad2ef8bf1b158cb6cf6554b8883aa2a5a931109a3fb20978c2ca
SHA512eb805c46bb7e956aec7baa3987959fba27bdb8fe6798603a5881ecc4c0dd87c84539a87ec22ea86ed0b853f6cfb64b5ee7613b925eea9aa616b20ed94d5389a1