Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
20-07-2023 06:12
General
-
Target
/ffmpeg.dll
-
Size
260KB
-
MD5
ea8cf3d80635d6b31999546b40ed1b47
-
SHA1
909f035afd3fdacad26467341ece9d21cf8c0db1
-
SHA256
70a9058a84cf7a5492224b2658fa4716a448e60e872981ed29c4478b1fa517c1
-
SHA512
0fc9089a3acdaa0c948a7ba61ee8d960b9646e8353c1e225987452fa2f609b08a467e09f86e572bd46e8c135badb88d0b90fba6e9f250c6c3ae9f1de586c807d
-
SSDEEP
3072:mqvsf9DcYb/QWoIDTTmXateQ3fDfGY9D8OFY+M7hKnZXTAGUcLaAm2mvFGvMnL5:Xsf9oWDTqXOjPDfGUDPFYRhgZNm2STN
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\\ffmpeg.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5c44e62c25be21df927b177bff0af938b
SHA1a5f1c320a3a609cc202532d4157863dcc69e5ff5
SHA2561db66958d02ee33df8aa1f4edef1b7096c7e106513bbbd07d7107e86d5f5194e
SHA5123177a7d4a360f65d52d484c63d0e57f5c531a336fe09bef5af5c8da522040ced12d1061abdee257b53d1deac4bf878428d9a5e5bd152d152ac56c236b523f775
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB