Analysis
- user interaction
yes - max time kernel
54s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
10/07/2026, 12:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RelWithDebInfo/MyPlatformer.dat
Resource
win11-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
RelWithDebInfo/MyPlatformer.exe
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target RelWithDebInfo/MyPlatformer.exe
- Size 7.7MB
- Sample260710-pd6j8abs5n
- SHA256 db323236ca2c7adf60023a35ba08411d072f2c9412e09e2871a0caee6d581308
- MD5 fe3e87491da244d09237667198018e07
- SHA1 802296e1fe4d6cf7f351dbd2f55de832d9cd2dc6
- SHA512 b5fa7395639eaa875df5166211bd96ec6df49fec7d0cfba163a1fb56aaf2bcfa5c4970cc43902e64b0598fb8d54f0ddd18816711eff401993305aa7cffbe3599
- SSDEEP 49152:cqPOBydAsssNrw6xq57/6zGaHA+5vjst9nH3XyA1tVhavubd19ODJDSPcA0QG2SU:cg/k1ocnH3XhfV01LUvA1sCw
- TLSH T172866B4673F902DCE5B38678866A6707D9767C194B10D7DF02A042AD1E33FE08A7A736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 9 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\discord-1521649642360668300\ = "URL:Run game 1521649642360668300 protocol" MyPlatformer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\discord-1521649642360668300\URL Protocol MyPlatformer.exe Key created \REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\discord-1521649642360668300\DefaultIcon MyPlatformer.exe Key created \REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\discord-1521649642360668300\shell\open\command MyPlatformer.exe Key created \REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\discord-1521649642360668300\shell MyPlatformer.exe Key created \REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\discord-1521649642360668300\shell\open MyPlatformer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\discord-1521649642360668300\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\RelWithDebInfo\\MyPlatformer.exe" MyPlatformer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\discord-1521649642360668300\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\RelWithDebInfo\\MyPlatformer.exe" MyPlatformer.exe Key created \REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\discord-1521649642360668300 MyPlatformer.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 1148 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 1148 AUDIODG.EXE - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3676 MyPlatformer.exe 3676 MyPlatformer.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\RelWithDebInfo\MyPlatformer.exe"C:\Users\Admin\AppData\Local\Temp\RelWithDebInfo\MyPlatformer.exe"1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3676
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004CC 0x00000000000004C81⤵
- Suspicious use of AdjustPrivilegeToken
PID:1148