0c7f13d75cd6aedf9a95973a1e4b4e16f1e497d5032b4355d62c2365f2bd04a6

Resubmissions

04/09/2024, 06:11

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
04/09/2024, 06:11

Target

Balatro.Friends of Jimbo-P2P/steam_api64.dll
Size

403KB
MD5

e98e357c5712d35fcf1ae53c99cbc6a9
SHA1

78a4d5818965d4386eca0adcf00ee81788d271ec
SHA256

c269ef26736f907c637ba33f146a318d5e154824c47d3fc8937781ea8829dcc8
SHA512

a3de98def4cf9b1c7c97c0862342b96a3b9c809e8710bf9c265f3a419c009a79f3b2864ed32bd1f98461ac6079a36143bcfda6a3715098f66a89c37ae9e13fe3
SSDEEP

6144:cXdX/P531mK22HF7FZi7JwLBVH6LRXLhcR4W4zCRGqJUZnfsDnssTvYySbfCvRJ:6zIh7+LLwXOuZSGqJCiTAywfCZJ

Score

1^/10

Suspicious behavior: EnumeratesProcesses 14 IoCs

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Balatro.Friends of Jimbo-P2P\steam_api64.dll",#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2828

memory/2828-0-0x000007FEF6BA0000-0x000007FEF6CB3000-memory.dmp

Filesize
1.1MB

Download
memory/2828-2-0x000007FEF6580000-0x000007FEF6693000-memory.dmp

Filesize
1.1MB

Download
memory/2828-1-0x000007FEF6BA0000-0x000007FEF6CB3000-memory.dmp

Filesize
1.1MB

Download
memory/2828-5-0x0000000077451000-0x0000000077452000-memory.dmp

Filesize
4KB

Download
memory/2828-6-0x0000000077400000-0x00000000775A9000-memory.dmp

Filesize
1.7MB

Download
memory/2828-7-0x0000000077400000-0x00000000775A9000-memory.dmp

Filesize
1.7MB

Download