Overview
overview
3Static
static
3ballgameo3...er.dll
windows10-2004-x64
1ballgameo3...er.dll
windows11-21h2-x64
1ballgameo3...gc.dll
windows10-2004-x64
1ballgameo3...gc.dll
windows11-21h2-x64
1ballgameo3...tor.js
windows10-2004-x64
3ballgameo3...tor.js
windows11-21h2-x64
3ballgameo3...tor.js
windows10-2004-x64
3ballgameo3...tor.js
windows11-21h2-x64
3ballgameo3...tor.js
windows10-2004-x64
3ballgameo3...tor.js
windows11-21h2-x64
3ballgameo3...ct.exe
windows10-2004-x64
1ballgameo3...ct.exe
windows11-21h2-x64
1ballgameo3...rp.dll
windows10-2004-x64
1ballgameo3...rp.dll
windows11-21h2-x64
1ballgameo3...ty.dll
windows10-2004-x64
1ballgameo3...ty.dll
windows11-21h2-x64
1ballgameo3...on.dll
windows10-2004-x64
1ballgameo3...on.dll
windows11-21h2-x64
1ballgameo3...on.dll
windows10-2004-x64
1ballgameo3...on.dll
windows11-21h2-x64
1ballgameo3...re.dll
windows10-2004-x64
1ballgameo3...re.dll
windows11-21h2-x64
1ballgameo3...ns.dll
windows10-2004-x64
1ballgameo3...ns.dll
windows11-21h2-x64
1ballgameo3...ta.dll
windows10-2004-x64
1ballgameo3...ta.dll
windows11-21h2-x64
1ballgameo3...ng.dll
windows10-2004-x64
1ballgameo3...ng.dll
windows11-21h2-x64
1ballgameo3...es.dll
windows10-2004-x64
1ballgameo3...es.dll
windows11-21h2-x64
1ballgameo3...em.dll
windows10-2004-x64
1ballgameo3...em.dll
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
155s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
25/05/2026, 12:19
Static task
static1
Behavioral task
behavioral1
Sample
ballgameo3win/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ballgameo3win/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
ballgameo3win/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
ballgameo3win/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
ballgameo3win/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
ballgameo3win/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.js
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
ballgameo3win/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
ballgameo3win/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.js
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
ballgameo3win/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
ballgameo3win/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.js
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
ballgameo3win/My project.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
ballgameo3win/My project.exe
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
ballgameo3win/My project_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
ballgameo3win/My project_Data/Managed/Assembly-CSharp.dll
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
ballgameo3win/My project_Data/Managed/Mono.Security.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
ballgameo3win/My project_Data/Managed/Mono.Security.dll
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
ballgameo3win/My project_Data/Managed/System.ComponentModel.Composition.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
ballgameo3win/My project_Data/Managed/System.ComponentModel.Composition.dll
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
ballgameo3win/My project_Data/Managed/System.Configuration.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
ballgameo3win/My project_Data/Managed/System.Configuration.dll
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
ballgameo3win/My project_Data/Managed/System.Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
ballgameo3win/My project_Data/Managed/System.Core.dll
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
ballgameo3win/My project_Data/Managed/System.Data.DataSetExtensions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
ballgameo3win/My project_Data/Managed/System.Data.DataSetExtensions.dll
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
ballgameo3win/My project_Data/Managed/System.Data.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
ballgameo3win/My project_Data/Managed/System.Data.dll
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
ballgameo3win/My project_Data/Managed/System.Drawing.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
ballgameo3win/My project_Data/Managed/System.Drawing.dll
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
ballgameo3win/My project_Data/Managed/System.EnterpriseServices.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
ballgameo3win/My project_Data/Managed/System.EnterpriseServices.dll
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
ballgameo3win/My project_Data/Managed/System.IO.Compression.FileSystem.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
ballgameo3win/My project_Data/Managed/System.IO.Compression.FileSystem.dll
Resource
win11-20260513-en
General
- Target ballgameo3win/My project.exe
- Size 651KB
- Sample260525-pg9faafv8j
- SHA256 76a4560e40ec43334f5300f52d45e74f55579709d5ea01eb838f24c7ac9e568b
- MD5 64bad1c1547181fd82125cc27fa70fb8
- SHA1 74965302e69c3782cf73ffbb503cf857d572aa8e
- SHA512 26f7b46c6e3c2d48960535138ee6a094b2ea7a5f6ecdf1dd5e1c99c4f277bbace87059a7e3e1fdbe106624c37e13006ea6ebc549856b471079bb179c0a2f1cca
- SSDEEP 3072:lQd/VdFg4W9mYucJ/OD8JOsI9SRAN7G2E1:K/7Fu9mpcJ/OD826
- TLSH T16BE4F192231A64A5EC5205F4CC5DC7387EA26FE52E10D6FA22D1FFFB39B23827915610
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 4760 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 4760 AUDIODG.EXE - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2704 My project.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 2704 wrote to memory of 4444 2704 My project.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\ballgameo3win\My project.exe"C:\Users\Admin\AppData\Local\Temp\ballgameo3win\My project.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2704 -
C:\Users\Admin\AppData\Local\Temp\ballgameo3win\UnityCrashHandler64.exe"C:\Users\Admin\AppData\Local\Temp\ballgameo3win\UnityCrashHandler64.exe" --attach 2704 19157157191682⤵PID:4444
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004BC 0x00000000000004C81⤵
- Suspicious use of AdjustPrivilegeToken
PID:4760