75157852354ae856c5d818602e31347e32b35e71203c7639eb157db327857f4a | Triage

Analysis

max time kernel
7s
max time network
72s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
01-10-2024 21:56

Sharing

Report Analysis Logs

General

Target

godot-jolt_windows-x64.dll
Size

3.3MB
MD5

8fbffb1065c97dba8c98a33624da5b8e
SHA1

6d65f1460bd2845a3f28ce92383077827318192e
SHA256

4c23d2d53a9a57153e04607e6d3027499de02abfa0f4abd15e0df25254cd0919
SHA512

3acb83e20ff7b36ae47dc6afc1e4269d5e8adfdbda3859b86e2ec52039fb000b3ab6e0a687fcec0b958133cf4e4a8f26d8d4523cf522eb4b2554e7851994052e
SSDEEP

49152:tM1iaTvAjKkQTuE65O30dxeKr3Dj7XLCbP9QvBiV7f:7ZGg3zLCb1QYtf

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2432 wrote to memory of 2224	2432	rundll32.exe	29
PID 2432 wrote to memory of 2224	2432	rundll32.exe	29
PID 2432 wrote to memory of 2224	2432	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\godot-jolt_windows-x64.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2432
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2432 -s 92
  2⤵
  PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads