Analysis
-
max time kernel
163s -
max time network
181s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system -
submitted
18/03/2023, 03:45
Static task
static1
Behavioral task
behavioral1
Sample
ffmpeg.exe
Resource
win10-20230220-en
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
ffmpeg.exe
Resource
win7-20230220-en
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
ffmpeg.exe
Resource
win10v2004-20230220-en
0 signatures
300 seconds
General
-
Target
ffmpeg.exe
-
Size
22.4MB
-
MD5
2209a1213ca2dbc6dea064c67204db32
-
SHA1
92427997c3578bb2b99a93ad68c6d2a1c9a971fa
-
SHA256
f659da0cab01498ef177b152271f4b708e257af237b2b81da8ab6be0132554f6
-
SHA512
e258ac82f62e2418d476afbcb10f74d118a05cbf87ef5210d5b958b8cec89b17a4047871b3731de304c601a27d2b42022b26c968a09cdeb834be6c2336c85298
-
SSDEEP
393216:X63lkSUrXM/NMNMJC1kepkXcpjsqYOq94nJXU:k/Kuyq94nNU
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\ffmpeg.exe"C:\Users\Admin\AppData\Local\Temp\ffmpeg.exe"1⤵PID:2072
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4400
-
C:\Users\Admin\AppData\Local\Temp\ffmpeg.exe"C:\Users\Admin\AppData\Local\Temp\ffmpeg.exe"1⤵PID:3644
-
C:\Users\Admin\AppData\Local\Temp\ffmpeg.exe"C:\Users\Admin\AppData\Local\Temp\ffmpeg.exe"1⤵PID:3552