ea7ef9556ba15896694f576dfbc47195bf469663c988a9ce51c6d92fc39661e1

Analysis

max time kernel
83s
max time network
65s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
30/06/2024, 03:14

Target

Murder.House.v1.0.2/Murder.House.v1.0.2/MURDER HOUSE.exe
Size

638KB
MD5

bf12cb5b007f90791ebb88023104791d
SHA1

be3be5e2fbb9a7d44d384da58c15fbee703f6ded
SHA256

f286939df03466307a2084d6059257954d5ca74107c6488a891c8b776fb37754
SHA512

488759dcb5fa9be8e37505289daf343b6de5b738cf1e0d5eea5db04b5dbb020de76e95f41ce7c94e15719bddfbaa50c768dcb2398107c810472ed1c91f8eab47
SSDEEP

12288:O4eCZJN9w7qpJlFRyI+BPvhUCCE2gfpvW2d2AOjABh8x:JPNXpJlytP2CCE2gflW1RYhM

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	4760	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4760	AUDIODG.EXE

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 924 wrote to memory of 3892	924	MURDER HOUSE.exe	82
PID 924 wrote to memory of 3892	924	MURDER HOUSE.exe	82

C:\Users\Admin\AppData\Local\Temp\Murder.House.v1.0.2\Murder.House.v1.0.2\MURDER HOUSE.exe
"C:\Users\Admin\AppData\Local\Temp\Murder.House.v1.0.2\Murder.House.v1.0.2\MURDER HOUSE.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:924
- C:\Users\Admin\AppData\Local\Temp\Murder.House.v1.0.2\Murder.House.v1.0.2\UnityCrashHandler64.exe
  "C:\Users\Admin\AppData\Local\Temp\Murder.House.v1.0.2\Murder.House.v1.0.2\UnityCrashHandler64.exe" --attach 924 2813058486272
  2⤵
  PID:3892

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x33c 0x38c
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4760

memory/924-1-0x0000028FF91D0000-0x0000028FF91E0000-memory.dmp

Filesize
64KB

Download
memory/924-0-0x0000028FF9840000-0x0000028FF9850000-memory.dmp

Filesize
64KB

Download