Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 07:53

General

  • Target

    $R1/mplayerc.exe

  • Size

    4.2MB

  • MD5

    e379e2e71017a9c9dccc0745dcc93513

  • SHA1

    a22081f0620fc1c93c2816b8e87559eb962d6dc4

  • SHA256

    fe2bceb7f99dfc746c8f76aa9a3120ab6716cb17d356d5ef95f4fb84a69d8039

  • SHA512

    427d35ac0438ae1d70b16b5ba155070a23712b63858b8bf21a780af4201eef6ed6a9df3a1e6f7abb3ac4d24c7b75ba84c1b994f8837eee289a5a6b5c7799605f

  • SSDEEP

    98304:ttMTnL3f/iIcTXZR1qU7FWG9MMVbFqo5cs+lzamVqIARzAXos3wcYM1dYoUAxdEr:nkbeNR9Lqo5cs+lzamVqIARzAXos3wcE

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$R1\mplayerc.exe
    "C:\Users\Admin\AppData\Local\Temp\$R1\mplayerc.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3056

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3056-0-0x0000000074F94000-0x0000000074F95000-memory.dmp

          Filesize

          4KB

        • memory/3056-1-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-2-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-3-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-15-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-17-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-16-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-14-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-13-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-12-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-11-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-10-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-9-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-8-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-7-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-6-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-5-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB

        • memory/3056-4-0x0000000074F80000-0x0000000075090000-memory.dmp

          Filesize

          1.1MB