Analysis

  • max time kernel
    141s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-04-2024 15:59

General

  • Target

    mpv.exe

  • Size

    103.4MB

  • MD5

    6386ac25e0e517a5657ed7d86135aa1c

  • SHA1

    a6ff989ca1422fb7ceac9deb1adadf08d1d1ef21

  • SHA256

    ace0356f01bccc6fe6b065fca6c21941c9e5cc058019ad3b4e041cc10003707f

  • SHA512

    267e17e017d645a07b74f0e46a9e3bdff3f65330623f075ecddd7a2100c9b7d0434b9861f157554e4fcea8b41f8e1ed2fd83006b1b78d2c65852a5b47f81ef8e

  • SSDEEP

    786432:+KLklthV4EHyMB4hcWV9lzCZddrxqhv4Uvyv/:+K0ZHyMB4h/V9lzCbd0Ov

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\mpv.exe
    "C:\Users\Admin\AppData\Local\Temp\mpv.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:4068
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:3936

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4068-0-0x00007FF73E2A0000-0x00007FF73E2B0000-memory.dmp

      Filesize

      64KB

    • memory/4068-2-0x00007FF77EA50000-0x00007FF77EA60000-memory.dmp

      Filesize

      64KB

    • memory/4068-1-0x00007FF744F20000-0x00007FF744F30000-memory.dmp

      Filesize

      64KB

    • memory/4068-4-0x00007FF744F20000-0x00007FF744F30000-memory.dmp

      Filesize

      64KB

    • memory/4068-3-0x00007FF73E2A0000-0x00007FF73E2B0000-memory.dmp

      Filesize

      64KB

    • memory/4068-5-0x00007FF73E2A0000-0x00007FF73E2B0000-memory.dmp

      Filesize

      64KB

    • memory/4068-6-0x00007FF73E2A0000-0x00007FF73E2B0000-memory.dmp

      Filesize

      64KB

    • memory/4068-7-0x00007FF73E2A0000-0x00007FF73E2B0000-memory.dmp

      Filesize

      64KB