Overview
overview
3Static
static
3r128gain-0...54.dll
windows7-x64
3r128gain-0...54.dll
windows10-2004-x64
3r128gain-0...53.dll
windows7-x64
1r128gain-0...53.dll
windows10-2004-x64
1r128gain-0...-2.dll
windows7-x64
1r128gain-0...-2.dll
windows10-2004-x64
1r128gain-0...54.dll
windows7-x64
3r128gain-0...54.dll
windows10-2004-x64
3r128gain-0...51.dll
windows7-x64
1r128gain-0...51.dll
windows10-2004-x64
1r128gain-0...x.html
windows7-x64
1r128gain-0...x.html
windows10-2004-x64
1r128gain-0...eg.exe
windows7-x64
1r128gain-0...eg.exe
windows10-2004-x64
1r128gain-0...in.dll
windows7-x64
1r128gain-0...in.dll
windows10-2004-x64
1r128gain-0...rl.dll
windows7-x64
1r128gain-0...rl.dll
windows10-2004-x64
1r128gain-0...ox.dll
windows7-x64
1r128gain-0...ox.dll
windows10-2004-x64
1r128gain-0...52.dll
windows7-x64
1r128gain-0...52.dll
windows10-2004-x64
1r128gain-0...ox.exe
windows7-x64
1r128gain-0...ox.exe
windows10-2004-x64
1r128gain-0...-0.dll
windows7-x64
1r128gain-0...-0.dll
windows10-2004-x64
1r128gain-0...-2.dll
windows7-x64
3r128gain-0...-2.dll
windows10-2004-x64
1r128gain-0...in.exe
windows7-x64
1r128gain-0...in.exe
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 12:16
Static task
static1
Behavioral task
behavioral1
Sample
r128gain-0.9.7-2/r128gain-tools/avcodec-54.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
r128gain-0.9.7-2/r128gain-tools/avcodec-54.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
r128gain-0.9.7-2/r128gain-tools/avdevice-53.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
r128gain-0.9.7-2/r128gain-tools/avdevice-53.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
r128gain-0.9.7-2/r128gain-tools/avfilter-2.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
r128gain-0.9.7-2/r128gain-tools/avfilter-2.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
r128gain-0.9.7-2/r128gain-tools/avformat-54.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
r128gain-0.9.7-2/r128gain-tools/avformat-54.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
r128gain-0.9.7-2/r128gain-tools/avutil-51.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
r128gain-0.9.7-2/r128gain-tools/avutil-51.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
r128gain-0.9.7-2/r128gain-tools/doc/index.html
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
r128gain-0.9.7-2/r128gain-tools/doc/index.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
r128gain-0.9.7-2/r128gain-tools/ffmpeg.exe
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
r128gain-0.9.7-2/r128gain-tools/ffmpeg.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
r128gain-0.9.7-2/r128gain-tools/libreplaygain.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
r128gain-0.9.7-2/r128gain-tools/libreplaygain.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
r128gain-0.9.7-2/r128gain-tools/libsetdlgitemurl.dll
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
r128gain-0.9.7-2/r128gain-tools/libsetdlgitemurl.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral19
Sample
r128gain-0.9.7-2/r128gain-tools/libsox.dll
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
r128gain-0.9.7-2/r128gain-tools/libsox.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
r128gain-0.9.7-2/r128gain-tools/postproc-52.dll
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
r128gain-0.9.7-2/r128gain-tools/postproc-52.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
r128gain-0.9.7-2/r128gain-tools/sox.exe
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
r128gain-0.9.7-2/r128gain-tools/sox.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
r128gain-0.9.7-2/r128gain-tools/swresample-0.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
r128gain-0.9.7-2/r128gain-tools/swresample-0.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
r128gain-0.9.7-2/r128gain-tools/swscale-2.dll
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
r128gain-0.9.7-2/r128gain-tools/swscale-2.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
r128gain-0.9.7-2/r128gain.exe
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
r128gain-0.9.7-2/r128gain.exe
Resource
win10v2004-20231222-en
General
-
Target
r128gain-0.9.7-2/r128gain-tools/avdevice-53.dll
-
Size
21KB
-
MD5
0f38aa8dc60b1e9078eb82a9925ec17b
-
SHA1
7f478dade7aea42e50ca1c8a269dcf2164b2da48
-
SHA256
2921da8aa9dd25127befb10fc53c0e2cb80fa4c0eefffc5b0c071a007a9061b9
-
SHA512
423fa7e28d6d881b1054b4b12b5e089987310325bf0f30d074c8c867d842f090bc9391b71011a7e70bc9306e75882b474b7e37d2aa4d70b304414de6e40cca93
-
SSDEEP
384:2I74N9aTkOMSL/3nxlvctvqH9BJG4QcKeRHiUvHfWZ/u:tOIhdD3nxlvuvc9tQMde1u
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2212 wrote to memory of 3656 2212 rundll32.exe 14 PID 2212 wrote to memory of 3656 2212 rundll32.exe 14 PID 2212 wrote to memory of 3656 2212 rundll32.exe 14
Processes
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\r128gain-0.9.7-2\r128gain-tools\avdevice-53.dll,#11⤵PID:3656
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\r128gain-0.9.7-2\r128gain-tools\avdevice-53.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2212