Analysis

  • max time kernel
    149s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    04/05/2024, 14:48

General

  • Target

    avcodec-59.dll

  • Size

    67.3MB

  • MD5

    5398be059d32fc99ae35a469bcd55255

  • SHA1

    dd4a6154a185e1fe24a4ce024179441ec8a44194

  • SHA256

    5023347055e0dc62d02d6e1d557832d61834fda26da11f43ea7eb04f224ed92d

  • SHA512

    c0f6b782030c8bd4da9bde690192a826f4eb9bb027918bdb81b1a91195e22d2a1e2475767f250cc4e6cd23e5a21650030765ec769acb8399f330172200251f94

  • SSDEEP

    393216:rh5v+6bVVGcq20EPrEStqiJ0WOf5dd0EhRCe9lBZkvxMXHthsT6ltmPshdPPRX29:r7HK20+RJ8jd0EjCilb+MXc4Ph4dH3

Score
10/10

Malware Config

Signatures

  • PrivateLoader

    PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\avcodec-59.dll,#1
    1⤵
      PID:404

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/404-2-0x00007FF989240000-0x00007FF9892E8000-memory.dmp

      Filesize

      672KB

    • memory/404-1-0x00007FF973AA0000-0x00007FF973CA3000-memory.dmp

      Filesize

      2.0MB

    • memory/404-0-0x00007FF973CB0000-0x00007FF978BB9000-memory.dmp

      Filesize

      79.0MB