d03c4bd3d2392477a6ae2641026304f57f5dded4c78d5177042cbddf3ab702b0

Submit
Reports

Overview

overview

Static

static

AK.xolotl....ly.dll

windows7-x64

AK.xolotl....ly.dll

windows10-2004-x64

AK.xolotl....44.exe

windows7-x64

AK.xolotl....44.exe

windows10-2004-x64

AK.xolotl....64.exe

windows7-x64

AK.xolotl....64.exe

windows10-2004-x64

AK.xolotl....64.exe

windows7-x64

AK.xolotl....64.exe

windows10-2004-x64

AK.xolotl....42.exe

windows7-x64

AK.xolotl....42.exe

windows10-2004-x64

AK.xolotl....43.exe

windows7-x64

AK.xolotl....43.exe

windows10-2004-x64

AK.xolotl....86.exe

windows7-x64

AK.xolotl....86.exe

windows10-2004-x64

AK.xolotl....62.exe

windows7-x64

AK.xolotl....62.exe

windows10-2004-x64

AK.xolotl....63.exe

windows7-x64

AK.xolotl....63.exe

windows10-2004-x64

AK.xolotl....64.exe

windows7-x64

AK.xolotl....64.exe

windows10-2004-x64

AK.xolotl....er.dll

windows7-x64

AK.xolotl....er.dll

windows10-2004-x64

AK.xolotl....tl.exe

windows7-x64

AK.xolotl....tl.exe

windows10-2004-x64

AK.xolotl....ut.dll

windows7-x64

AK.xolotl....ut.dll

windows10-2004-x64

AK.xolotl....io.dll

windows7-x64

AK.xolotl....io.dll

windows10-2004-x64

AK.xolotl....ed.dll

windows7-x64

AK.xolotl....ed.dll

windows10-2004-x64

AK.xolotl....io.dll

windows7-x64

AK.xolotl....io.dll

windows10-2004-x64

Analysis

max time kernel
135s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19-07-2024 22:57

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/GameAssembly.dll

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/GameAssembly.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vc_redist.x644.exe

Resource

win7-20240704-en

discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vc_redist.x644.exe

Resource

win10v2004-20240709-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vc_redist.x864.exe

Resource

win7-20240705-en

discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vc_redist.x864.exe

Resource

win10v2004-20240709-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vcredist_x64.exe

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral8

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vcredist_x64.exe

Resource

win10v2004-20240709-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral9

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vcredist_x642.exe

Resource

win7-20240708-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vcredist_x642.exe

Resource

win10v2004-20240709-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vcredist_x643.exe

Resource

win7-20240704-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vcredist_x643.exe

Resource

win10v2004-20240709-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vcredist_x86.exe

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral14

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vcredist_x86.exe

Resource

win10v2004-20240709-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vcredist_x862.exe

Resource

win7-20240705-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vcredist_x862.exe

Resource

win10v2004-20240709-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vcredist_x863.exe

Resource

win7-20240705-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/Redist/vcredist_x863.exe

Resource

win10v2004-20240709-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/UnityCrashHandler64.exe

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/UnityCrashHandler64.exe

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/UnityPlayer.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/UnityPlayer.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/ak-xolotl.exe

Resource

win7-20240708-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/ak-xolotl.exe

Resource

win10v2004-20240709-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral25

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/ak-xolotl_Data/Plugins/x86_64/Rewired_DirectInput.dll

Resource

win7-20240704-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/ak-xolotl_Data/Plugins/x86_64/Rewired_DirectInput.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/ak-xolotl_Data/Plugins/x86_64/fmodstudio.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/ak-xolotl_Data/Plugins/x86_64/fmodstudio.dll

Resource

win10v2004-20240704-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/ak-xolotl_Data/Plugins/x86_64/lib_burst_generated.dll

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/ak-xolotl_Data/Plugins/x86_64/lib_burst_generated.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/ak-xolotl_Data/Plugins/x86_64/resonanceaudio.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/ak-xolotl_Data/Plugins/x86_64/resonanceaudio.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/ak-xolotl_Data/Plugins/x86_64/Rewired_DirectInput.dll
Size

12KB
MD5

0afaa40682693c887a168878a20848f7
SHA1

8145451c75c6264aaa58a6d89f01d734a96ea879
SHA256

9989b282d43621259160954f3c2191afc3e3a13adb0091c3f60be228831858ad
SHA512

6896f54b289249683e2c6471dfabb6c3437e2ac17a9bc848cebc0d1696701755007a7f306cb34eceff49ac51493e4387464ecc05acd21836dd65fb37899dfd51
SSDEEP

192:TH0LEDv1KAaMBah/F0BJWId1w0jBheChQlgJnd8:TUgDoAaZkJWIHN1BhQlgP

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

rundll32.exe

pid process

2228 rundll32.exe

pid	process
2228	rundll32.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\AK.xolotl.v1.3.13502\AK.xolotl.v1.3.13502\ak-xolotl_Data\Plugins\x86_64\Rewired_DirectInput.dll,#1
1⤵
- Suspicious use of SetWindowsHookEx
PID:2228

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads