527768710ddb0953fce5eb1700c2566b6451135d76f1d0610b63907cd5ba94c5

Resubmissions

22/10/2026, 16:10

22/10/2026, 15:59

max time kernel
898s
max time network
461s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/10/2026, 16:10

Target
Pig Friends_Data/Plugins/x86_64/discord_game_sdk.dll
Size 3.7MB
Sample261022-tmp12sdw41
SHA256 527768710ddb0953fce5eb1700c2566b6451135d76f1d0610b63907cd5ba94c5
MD5 d8cc567718550ae35c1566c3315b90df
SHA1 e5d8120a8a8583fe7e3177ae7d8fe797c002f263
SHA512 5e1d72bbb466d032596147dd1a90f5ebcaa82d3d56ee7a0b1aa3a37d4bb42e1fcb510b269451a1b9c7f3b8a1c18b1c5f530b200f2fbbe2ec990b4e1c12e6f5e8
SSDEEP 49152:cxytJCv8RbSimYQSaKCZhYtOVt7CPjitem2vUkcWDnVf6OuBimHdXopJErae4/KC:lD400amm+8m4
TLSH
T12B0648213A56647CC1ABC4B483874A725E3234CB1B35BAFF45D156782F69AF46F3C228
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000_Classes\Local Settings	rundll32.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5020	OpenWith.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Pig Friends_Data\Plugins\x86_64\discord_game_sdk.dll",#1
1⤵
- Modifies registry class
PID:1436

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:5020