Overview
overview
7Static
static
3flare-win-v1.14.exe
windows10-2004-x64
7SDL2.dll
windows10-2004-x64
1SDL2_image.dll
windows10-2004-x64
1SDL2_mixer.dll
windows10-2004-x64
1SDL2_ttf.dll
windows10-2004-x64
1flare.exe
windows10-2004-x64
1libFLAC.dll
windows10-2004-x64
1libLerc.dll
windows10-2004-x64
1libbrotlicommon.dll
windows10-2004-x64
1libbrotlidec.dll
windows10-2004-x64
1libbrotlienc.dll
windows10-2004-x64
1libbz2-1.dll
windows10-2004-x64
1libdeflate.dll
windows10-2004-x64
1libfreetype-6.dll
windows10-2004-x64
1libgcc_s_seh-1.dll
windows10-2004-x64
1libglib-2.0-0.dll
windows10-2004-x64
1libgraphite2.dll
windows10-2004-x64
1libharfbuzz-0.dll
windows10-2004-x64
1libhwy.dll
windows10-2004-x64
1libiconv-2.dll
windows10-2004-x64
1libintl-8.dll
windows10-2004-x64
1libjbig-0.dll
windows10-2004-x64
1libjpeg-8.dll
windows10-2004-x64
1libjxl.dll
windows10-2004-x64
1liblcms2-2.dll
windows10-2004-x64
1liblzma-5.dll
windows10-2004-x64
1libmpg123-0.dll
windows10-2004-x64
1libogg-0.dll
windows10-2004-x64
1libopus-0.dll
windows10-2004-x64
1libopusfile-0.dll
windows10-2004-x64
1libpcre-1.dll
windows10-2004-x64
1mods/empyr...it.vbs
windows10-2004-x64
1Analysis
-
max time kernel
125s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11/09/2024, 22:07
Static task
static1
Behavioral task
behavioral1
Sample
flare-win-v1.14.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
SDL2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
SDL2_image.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
SDL2_mixer.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
SDL2_ttf.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
flare.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
libFLAC.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
libLerc.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
libbrotlicommon.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
libbrotlidec.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
libbrotlienc.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
libbz2-1.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
libdeflate.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
libfreetype-6.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
libgcc_s_seh-1.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
libglib-2.0-0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
libgraphite2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral18
Sample
libharfbuzz-0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
libhwy.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral20
Sample
libiconv-2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
libintl-8.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral22
Sample
libjbig-0.dll
Resource
win10v2004-20240910-en
Behavioral task
behavioral23
Sample
libjpeg-8.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral24
Sample
libjxl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
liblcms2-2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral26
Sample
liblzma-5.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
libmpg123-0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral28
Sample
libogg-0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
libopus-0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral30
Sample
libopusfile-0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
libpcre-1.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral32
Sample
mods/empyrean_campaign/maps/the_pit.vbs
Resource
win10v2004-20240802-en
General
-
Target
libjxl.dll
-
Size
3.2MB
-
MD5
b04fc7d64b55c02baca6727d3bbbd086
-
SHA1
e1d5c781a5cc08d70ddcdf3f3e1c2cf8da0d7f63
-
SHA256
83143e0057971d25ac21577716c4b9e545507dd8b5678d43c700feff09fbcafb
-
SHA512
f478e1884a0c453a5fc99b7cb14210601ace6eb9fec1222d3c506e4a191c15267bda796660866410db75953f4cb08c437245134143e9c3806511cc9552edafa9
-
SSDEEP
49152:y5zMQwU+0q4hKVQs/0lXXjXTkXG0aU/aOEKPmHRoTl3knkwIiFTFlD90ob58YTyY:6zi0HsmX0NdVOOoWYTyaX
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\libjxl.dll,#11⤵PID:4968
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=944,i,2904906934812054273,11716976550456127484,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:81⤵PID:4100