Overview
overview
6Static
static
3D3D12/D3D12Core.dll
windows11-21h2-x64
1GameAssembly.dll
windows11-21h2-x64
1Pig Friends.exe
windows11-21h2-x64
6Pig Friend...dk.dll
windows11-21h2-x64
1Pig Friend...ap.dll
windows11-21h2-x64
1Pig Friend...er.ps1
windows11-21h2-x64
6UnityCrash...64.exe
windows11-21h2-x64
1UnityPlayer.dll
windows11-21h2-x64
1baselib.dll
windows11-21h2-x64
1Analysis
- max time kernel
898s - max time network
454s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/10/2026, 16:10
Static task
static1
Behavioral task
behavioral1
Sample
D3D12/D3D12Core.dll
Resource
win11-20260911-en
Behavioral task
behavioral2
Sample
GameAssembly.dll
Resource
win11-20260911-en
Behavioral task
behavioral3
Sample
Pig Friends.exe
Resource
win11-20260911-en
Behavioral task
behavioral4
Sample
Pig Friends_Data/Plugins/x86_64/discord_game_sdk.dll
Resource
win11-20260911-en
Behavioral task
behavioral5
Sample
Pig Friends_Data/Plugins/x86_64/libonigwrap.dll
Resource
win11-20260911-en
Behavioral task
behavioral6
Sample
Pig Friends_Data/StreamingAssets/local/live_invasion_chinaassetprovider.ps1
Resource
win11-20260911-en
Behavioral task
behavioral7
Sample
UnityCrashHandler64.exe
Resource
win11-20260911-en
Behavioral task
behavioral8
Sample
UnityPlayer.dll
Resource
win11-20260911-en
Behavioral task
behavioral9
Sample
baselib.dll
Resource
win11-20260911-en
General
- Target UnityPlayer.dll
- Size 34.8MB
- Sample261022-tmp12sdw41
- SHA256 ef449a40fad552987b990701b76fde697ea81e1f14bd5535ed406d1faf2447b6
- MD5 46dfa9dc9cbcb70b2cbf9663a55ec57d
- SHA1 0ba41f8e592eff6127437cd34cc91a1369dd0ae2
- SHA512 669e9dbdea14b2af70491100e54e444ec8936f9948d3edb130c1308dd58f97588fa0c516f3e62fd50e8c7ca1201db16654f9c3b6d8af6a88cdbad3869f0fc58f
- SSDEEP 393216:r1l+0X1RsmVqap9HTFH6/kh3xUiRyU82a+pwQymGgjaTOQimbSHe:r1l+p/HWpwbgj/BzHe
- TLSH T10E87AE56A2B811D8D47BC078975BA91BFBB1344907308AEB52E049A46F33FF16A7F350
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 912 rundll32.exe 912 rundll32.exe