f7faeebc8ab624646bda1935acbe807a2667ca47c2e7e1c74044ee981676a10c | Triage

Analysis

max time kernel
14s
max time network
18s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
19-12-2024 13:11

Sharing

Report Analysis Logs

General

Target

godot-jolt_windows-x64.dll
Size

3.3MB
MD5

f8bc8ddce09bf2da998e1dca48135b98
SHA1

ce9129b1a6a363a0685855287e060faf0cf14d3e
SHA256

83cd30fe89c461a415221253336fa58dcb3b527b05b862b75b68945f4d47cf09
SHA512

2643a04bc69b83a095c68a41e4121abf379246dcfaaf1be3a764ac2cbe1238ba28caff13900720c1fac6d64a7e474479352fd354e613f912ae04fa41ee8d83ba
SSDEEP

49152:V25r1SKesxc/uuiXom5k1ialirWL+bGvQc7QCvw:24TuMlZL+biQqQL

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 3000	2244	rundll32.exe	30
PID 2244 wrote to memory of 3000	2244	rundll32.exe	30
PID 2244 wrote to memory of 3000	2244	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\godot-jolt_windows-x64.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2244 -s 92
  2⤵
  PID:3000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads