Analysis

  • max time kernel
    289s
  • max time network
    322s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    30/06/2024, 03:14

General

  • Target

    Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE.exe

  • Size

    638KB

  • MD5

    bf12cb5b007f90791ebb88023104791d

  • SHA1

    be3be5e2fbb9a7d44d384da58c15fbee703f6ded

  • SHA256

    f286939df03466307a2084d6059257954d5ca74107c6488a891c8b776fb37754

  • SHA512

    488759dcb5fa9be8e37505289daf343b6de5b738cf1e0d5eea5db04b5dbb020de76e95f41ce7c94e15719bddfbaa50c768dcb2398107c810472ed1c91f8eab47

  • SSDEEP

    12288:O4eCZJN9w7qpJlFRyI+BPvhUCCE2gfpvW2d2AOjABh8x:JPNXpJlytP2CCE2gflW1RYhM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 54 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Murder.House.v1.0.2\Murder.House.v1.0.2\MURDER HOUSE.exe
    "C:\Users\Admin\AppData\Local\Temp\Murder.House.v1.0.2\Murder.House.v1.0.2\MURDER HOUSE.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2436
    • C:\Users\Admin\AppData\Local\Temp\Murder.House.v1.0.2\Murder.House.v1.0.2\UnityCrashHandler64.exe
      "C:\Users\Admin\AppData\Local\Temp\Murder.House.v1.0.2\Murder.House.v1.0.2\UnityCrashHandler64.exe" --attach 2436 1052672
      2⤵
        PID:2440
    • C:\Windows\system32\taskmgr.exe
      "C:\Windows\system32\taskmgr.exe" /4
      1⤵
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:888

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\LocalLow\Vague Scenario LLC_\MURDER HOUSE\SaveFile.es3

      Filesize

      72B

      MD5

      ed3f5506e9d3b3326adcbf57f8e431e9

      SHA1

      adc67d2be4c677b1479eb33194b7ae5bc0c94685

      SHA256

      7523544bc385ad2ef8bf1b158cb6cf6554b8883aa2a5a931109a3fb20978c2ca

      SHA512

      eb805c46bb7e956aec7baa3987959fba27bdb8fe6798603a5881ecc4c0dd87c84539a87ec22ea86ed0b853f6cfb64b5ee7613b925eea9aa616b20ed94d5389a1

    • memory/888-118-0x0000000140000000-0x00000001405E8000-memory.dmp

      Filesize

      5.9MB

    • memory/888-117-0x0000000140000000-0x00000001405E8000-memory.dmp

      Filesize

      5.9MB

    • memory/888-119-0x0000000140000000-0x00000001405E8000-memory.dmp

      Filesize

      5.9MB

    • memory/888-120-0x0000000140000000-0x00000001405E8000-memory.dmp

      Filesize

      5.9MB

    • memory/888-125-0x0000000140000000-0x00000001405E8000-memory.dmp

      Filesize

      5.9MB

    • memory/888-126-0x0000000140000000-0x00000001405E8000-memory.dmp

      Filesize

      5.9MB

    • memory/888-124-0x0000000140000000-0x00000001405E8000-memory.dmp

      Filesize

      5.9MB

    • memory/888-123-0x0000000140000000-0x00000001405E8000-memory.dmp

      Filesize

      5.9MB

    • memory/888-122-0x0000000140000000-0x00000001405E8000-memory.dmp

      Filesize

      5.9MB

    • memory/888-121-0x0000000140000000-0x00000001405E8000-memory.dmp

      Filesize

      5.9MB

    • memory/2436-47-0x0000000064030000-0x0000000064040000-memory.dmp

      Filesize

      64KB

    • memory/2436-52-0x00000000643B0000-0x00000000643C0000-memory.dmp

      Filesize

      64KB

    • memory/2436-16-0x0000000063D90000-0x0000000063DA0000-memory.dmp

      Filesize

      64KB

    • memory/2436-17-0x0000000063EA0000-0x0000000063EB0000-memory.dmp

      Filesize

      64KB

    • memory/2436-18-0x0000000064030000-0x0000000064040000-memory.dmp

      Filesize

      64KB

    • memory/2436-30-0x0000000000130000-0x0000000000140000-memory.dmp

      Filesize

      64KB

    • memory/2436-29-0x0000000000140000-0x0000000000150000-memory.dmp

      Filesize

      64KB

    • memory/2436-32-0x00000000643A0000-0x00000000643B0000-memory.dmp

      Filesize

      64KB

    • memory/2436-31-0x0000000062D30000-0x0000000062D50000-memory.dmp

      Filesize

      128KB

    • memory/2436-33-0x0000000063700000-0x0000000063710000-memory.dmp

      Filesize

      64KB

    • memory/2436-34-0x00000000643B0000-0x00000000643C0000-memory.dmp

      Filesize

      64KB

    • memory/2436-36-0x00000000644C0000-0x00000000644D0000-memory.dmp

      Filesize

      64KB

    • memory/2436-35-0x00000000638A0000-0x00000000638B0000-memory.dmp

      Filesize

      64KB

    • memory/2436-37-0x00000000638B0000-0x00000000638C0000-memory.dmp

      Filesize

      64KB

    • memory/2436-38-0x00000000645D0000-0x00000000645E0000-memory.dmp

      Filesize

      64KB

    • memory/2436-39-0x0000000063B10000-0x0000000063B30000-memory.dmp

      Filesize

      128KB

    • memory/2436-40-0x00000000645E0000-0x00000000645F0000-memory.dmp

      Filesize

      64KB

    • memory/2436-41-0x0000000063A00000-0x0000000063A10000-memory.dmp

      Filesize

      64KB

    • memory/2436-42-0x00000000645F0000-0x0000000064600000-memory.dmp

      Filesize

      64KB

    • memory/2436-44-0x0000000064600000-0x0000000064610000-memory.dmp

      Filesize

      64KB

    • memory/2436-43-0x0000000063D90000-0x0000000063DA0000-memory.dmp

      Filesize

      64KB

    • memory/2436-46-0x0000000064720000-0x0000000064740000-memory.dmp

      Filesize

      128KB

    • memory/2436-45-0x0000000063EA0000-0x0000000063EB0000-memory.dmp

      Filesize

      64KB

    • memory/2436-14-0x0000000063B10000-0x0000000063B30000-memory.dmp

      Filesize

      128KB

    • memory/2436-48-0x0000000064740000-0x0000000064750000-memory.dmp

      Filesize

      64KB

    • memory/2436-49-0x0000000064760000-0x0000000064770000-memory.dmp

      Filesize

      64KB

    • memory/2436-51-0x00000000647C0000-0x00000000647D0000-memory.dmp

      Filesize

      64KB

    • memory/2436-50-0x00000000643A0000-0x00000000643B0000-memory.dmp

      Filesize

      64KB

    • memory/2436-53-0x00000000647D0000-0x00000000647E0000-memory.dmp

      Filesize

      64KB

    • memory/2436-15-0x0000000063A00000-0x0000000063A10000-memory.dmp

      Filesize

      64KB

    • memory/2436-63-0x00000000647E0000-0x00000000647F0000-memory.dmp

      Filesize

      64KB

    • memory/2436-62-0x00000000644C0000-0x00000000644D0000-memory.dmp

      Filesize

      64KB

    • memory/2436-78-0x00000000647F0000-0x0000000064800000-memory.dmp

      Filesize

      64KB

    • memory/2436-77-0x00000000645D0000-0x00000000645E0000-memory.dmp

      Filesize

      64KB

    • memory/2436-80-0x0000000064800000-0x0000000064810000-memory.dmp

      Filesize

      64KB

    • memory/2436-79-0x00000000645E0000-0x00000000645F0000-memory.dmp

      Filesize

      64KB

    • memory/2436-81-0x00000000645F0000-0x0000000064600000-memory.dmp

      Filesize

      64KB

    • memory/2436-82-0x0000000064810000-0x0000000064820000-memory.dmp

      Filesize

      64KB

    • memory/2436-95-0x0000000064600000-0x0000000064610000-memory.dmp

      Filesize

      64KB

    • memory/2436-96-0x0000000064A90000-0x0000000064AA0000-memory.dmp

      Filesize

      64KB

    • memory/2436-98-0x0000000064AB0000-0x0000000064AC0000-memory.dmp

      Filesize

      64KB

    • memory/2436-97-0x0000000064720000-0x0000000064740000-memory.dmp

      Filesize

      128KB

    • memory/2436-101-0x0000000064740000-0x0000000064750000-memory.dmp

      Filesize

      64KB

    • memory/2436-102-0x0000000064760000-0x0000000064770000-memory.dmp

      Filesize

      64KB

    • memory/2436-103-0x00000000647C0000-0x00000000647D0000-memory.dmp

      Filesize

      64KB

    • memory/2436-104-0x00000000647D0000-0x00000000647E0000-memory.dmp

      Filesize

      64KB

    • memory/2436-105-0x00000000647E0000-0x00000000647F0000-memory.dmp

      Filesize

      64KB

    • memory/2436-106-0x00000000647F0000-0x0000000064800000-memory.dmp

      Filesize

      64KB

    • memory/2436-13-0x00000000638B0000-0x00000000638C0000-memory.dmp

      Filesize

      64KB

    • memory/2436-12-0x00000000638A0000-0x00000000638B0000-memory.dmp

      Filesize

      64KB

    • memory/2436-11-0x0000000063700000-0x0000000063710000-memory.dmp

      Filesize

      64KB

    • memory/2436-2-0x0000000062D30000-0x0000000062D50000-memory.dmp

      Filesize

      128KB

    • memory/2436-1-0x0000000000130000-0x0000000000140000-memory.dmp

      Filesize

      64KB

    • memory/2436-0-0x0000000000140000-0x0000000000150000-memory.dmp

      Filesize

      64KB

    • memory/2436-107-0x0000000064800000-0x0000000064810000-memory.dmp

      Filesize

      64KB

    • memory/2436-108-0x0000000064810000-0x0000000064820000-memory.dmp

      Filesize

      64KB

    • memory/2436-109-0x0000000064A90000-0x0000000064AA0000-memory.dmp

      Filesize

      64KB

    • memory/2436-110-0x0000000064AB0000-0x0000000064AC0000-memory.dmp

      Filesize

      64KB