1c6df026b501c1bd0bd7538d1ad29c41565ee60a9441ae183f00d5409e0b48b4 | Triage

Analysis

max time kernel
0s
platform
windows11-21h2_x64
resource
win11-20231215-en
resource tags

arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system
submitted
09-02-2024 08:52

Sharing

Report Analysis Logs

General

Target

Minty/ffmpeg.dll
Size

1.2MB
MD5

eae2a95bb9404eda67360ebefeb32080
SHA1

a2ba1507a815c54a91f74f3f1965ff1cceb75e13
SHA256

ebdf82bf567ba506879352053d5d670b369a41cfe783f3c177010460146518d3
SHA512

f6a06c3d678195b5c9b091e89b4493cf4012f1cf1f820f2778d28236d9566ed115feacb07f237ec79a8b71ddba3453d57233c63e079a0b498ad09b561a0e472c
SSDEEP

24576:y8M3T0FajLnlBXECsd/BgXJ8dr6VG74+lOjAd/o7Cln:yjb3lZ6d68N0V+lD1o7Cln

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4248 wrote to memory of 3144	4248	rundll32.exe	76
PID 4248 wrote to memory of 3144	4248	rundll32.exe	76
PID 4248 wrote to memory of 3144	4248	rundll32.exe	76

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Minty\ffmpeg.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4248
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Minty\ffmpeg.dll,#1
  2⤵
  PID:3144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads