Overview
overview
5Static
static
3d3d12.dll
windows7-x64
5d3d12.dll
windows10-2004-x64
5d3dcompiler_47.dll
windows10-2004-x64
1mods/RDR2Upscaler.dll
windows7-x64
1mods/RDR2Upscaler.dll
windows10-2004-x64
1mods/RDR2Upscaler.dll
windows7-x64
5mods/RDR2Upscaler.dll
windows10-2004-x64
5mods/Upsca...in.dll
windows7-x64
1mods/Upsca...in.dll
windows10-2004-x64
1mods/Upsca...64.dll
windows7-x64
1mods/Upsca...64.dll
windows10-2004-x64
1mods/Upsca...64.dll
windows7-x64
1mods/Upsca...64.dll
windows10-2004-x64
1mods/Upsca...64.dll
windows7-x64
1mods/Upsca...64.dll
windows10-2004-x64
1mods/Upsca...64.dll
windows7-x64
1mods/Upsca...64.dll
windows10-2004-x64
1mods/Upsca...64.dll
windows7-x64
1mods/Upsca...64.dll
windows10-2004-x64
1mods/Upsca...ss.dll
windows7-x64
1mods/Upsca...ss.dll
windows10-2004-x64
1mods/Upsca...ss.dll
windows7-x64
1mods/Upsca...ss.dll
windows10-2004-x64
1Analysis
-
max time kernel
83s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
05/07/2024, 04:16
Static task
static1
Behavioral task
behavioral1
Sample
d3d12.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d3d12.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
d3dcompiler_47.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral4
Sample
mods/RDR2Upscaler.dll
Resource
win7-20240704-en
Behavioral task
behavioral5
Sample
mods/RDR2Upscaler.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral6
Sample
mods/RDR2Upscaler.dll
Resource
win7-20240704-en
Behavioral task
behavioral7
Sample
mods/RDR2Upscaler.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral8
Sample
mods/UpscalerBasePlugin/PDPerfPlugin.dll
Resource
win7-20240704-en
Behavioral task
behavioral9
Sample
mods/UpscalerBasePlugin/PDPerfPlugin.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral10
Sample
mods/UpscalerBasePlugin/ffx_backend_dx12_x64.dll
Resource
win7-20240611-en
Behavioral task
behavioral11
Sample
mods/UpscalerBasePlugin/ffx_backend_dx12_x64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral12
Sample
mods/UpscalerBasePlugin/ffx_frameinterpolation_x64.dll
Resource
win7-20240220-en
Behavioral task
behavioral13
Sample
mods/UpscalerBasePlugin/ffx_frameinterpolation_x64.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral14
Sample
mods/UpscalerBasePlugin/ffx_fsr3_x64.dll
Resource
win7-20240704-en
Behavioral task
behavioral15
Sample
mods/UpscalerBasePlugin/ffx_fsr3_x64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral16
Sample
mods/UpscalerBasePlugin/ffx_fsr3upscaler_x64.dll
Resource
win7-20240611-en
Behavioral task
behavioral17
Sample
mods/UpscalerBasePlugin/ffx_fsr3upscaler_x64.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral18
Sample
mods/UpscalerBasePlugin/ffx_opticalflow_x64.dll
Resource
win7-20240611-en
Behavioral task
behavioral19
Sample
mods/UpscalerBasePlugin/ffx_opticalflow_x64.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral20
Sample
mods/UpscalerBasePlugin/libxess.dll
Resource
win7-20240508-en
Behavioral task
behavioral21
Sample
mods/UpscalerBasePlugin/libxess.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral22
Sample
mods/UpscalerBasePlugin/nvngx_dlss.dll
Resource
win7-20240704-en
Behavioral task
behavioral23
Sample
mods/UpscalerBasePlugin/nvngx_dlss.dll
Resource
win10v2004-20240704-en
General
-
Target
mods/RDR2Upscaler.dll
-
Size
6.9MB
-
MD5
c1855cfbf83c491123f65022878204bc
-
SHA1
56459fa89154a62f467088c31c5b4de4ba4ec0cb
-
SHA256
dcb51d09023069cd24067c92a0a51ed908cdd4fc90f227ced04c6bbadabf8b3c
-
SHA512
4b0c8d4ea10b6e5441770dfadc8066fc4c0c66820d6f0b8fb3b5f4057569dc7e529e2bab53e438367cbe0325cbe547ab4cca356cc1c2ea2ca26608e404f88762
-
SSDEEP
98304:O/wBKqI22QCN2zxZKYlCxNZ6r1kVoqZIt1j7quFwXiyfqydthXUokPZU7k9SCEq9:8wRI22g2Y8VVdIL7h6XicqEC67k9aLI
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 1484 rundll32.exe 1484 rundll32.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1484 rundll32.exe 1484 rundll32.exe