Overview

overview

1

Static

static

1

discord_game_sdk.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    12s
  • max time network
    8s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    07/08/2024, 10:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    discord_game_sdk.dll

  • Size

    3.7MB

  • MD5

    d8cc567718550ae35c1566c3315b90df

  • SHA1

    e5d8120a8a8583fe7e3177ae7d8fe797c002f263

  • SHA256

    527768710ddb0953fce5eb1700c2566b6451135d76f1d0610b63907cd5ba94c5

  • SHA512

    5e1d72bbb466d032596147dd1a90f5ebcaa82d3d56ee7a0b1aa3a37d4bb42e1fcb510b269451a1b9c7f3b8a1c18b1c5f530b200f2fbbe2ec990b4e1c12e6f5e8

  • SSDEEP

    49152:cxytJCv8RbSimYQSaKCZhYtOVt7CPjitem2vUkcWDnVf6OuBimHdXopJErae4/KC:lD400amm+8m4

Score
1/10

Malware Config

Signatures

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\discord_game_sdk.dll,#1
    1⤵
    • Modifies registry class
    PID:1400
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3572
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:764

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
          Filesize

          10KB

          MD5

          4d52399020a24c1f6b4254cc7252504b

          SHA1

          2afe0c8994c64898d5fe16ca68811438ef19b0ee

          SHA256

          e75a14ce8abaea1788c4361552ef9ef2b86ea02485eb4ad5f8c22c9c49ece3e7

          SHA512

          a481726d4ef1dfd67a86ae79e16abda87a0f370310758cc8a1bb2516a69557129e9612b9430c0ae11d7ddf72e1afc3375f5649a09bb53febe5cc16718ba976b4

          Download Submit

        • C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
          Filesize

          10KB

          MD5

          f065a39d7e06597189e073755a0c1719

          SHA1

          f2ce3c9d697f40ab82ec0fecce46de6b354b4c54

          SHA256

          5ce6608613c37cdb3b66ddee4db699f41b06bb3906301b29c5f5039b8ce6356b

          SHA512

          c361ae3950de1fb738ef9b18d58786819ae246c21631bdfe4c392a41a859e25fabbdfd473d42d875846cb4a1abbbe798b29512264f9aa3f9558e067795468e20

          Download Submit