Analysis

  • max time kernel
    129s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/05/2024, 09:28

General

  • Target

    ffmpeg.exe

  • Size

    23.8MB

  • MD5

    fa4c4259ff26da782fc45f48a5e3e7cf

  • SHA1

    8c0bd9037eea294a000558cc1be951161d643bf2

  • SHA256

    0c9ad491564af3316cb7f829dc6b8c800f2921ad2f4fc443e23f43f09322837c

  • SHA512

    7d443cb26954b49df0aaacf671c238567fe975d638549bb7ecc4d9a05c9d2bef655d0e0f2d30ab86498a4d6ede9e33ebda6a0b6075098bbac3513a7eba4ad35d

  • SSDEEP

    393216:4cUtOKBZz6S5rDI4j5TqxoDsPPfhGwQLp0dlHc:4cUtxprJRi

Score
10/10

Malware Config

Signatures

  • PrivateLoader

    PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ffmpeg.exe
    "C:\Users\Admin\AppData\Local\Temp\ffmpeg.exe"
    1⤵
      PID:628

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/628-1-0x0000000000401000-0x00000000015A3000-memory.dmp

      Filesize

      17.6MB

    • memory/628-0-0x0000000000400000-0x000000000247F000-memory.dmp

      Filesize

      32.5MB

    • memory/628-2-0x0000000000400000-0x000000000247F000-memory.dmp

      Filesize

      32.5MB