52c7d5ac19fcf8264fb2e662a55500911440d9675056e5337add79ab4496c172 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
28-05-2024 10:10

Sharing

Report Analysis Logs

General

Target

mpv.exe
Size

70.9MB
MD5

6a13bc3b4c271a6c9b06e7c9cedd33c4
SHA1

8b8a4f712de0b406be15020a329767edc4158b9b
SHA256

52c7d5ac19fcf8264fb2e662a55500911440d9675056e5337add79ab4496c172
SHA512

721460dd0994e289dd9f45db397e3b4c35d284ee087b7866d3a1c3f2fcf7c37ac66eeef512360d8972fcc5e92baa800643a7d3ee684e24ce64885b254e055fcd
SSDEEP

786432:3lsB6sSn7wA2k67JGkr6PKmaqXarNd+IFxBjAqzh7MaxLvdRrw:WNY7A7JGkr6ydN8IFxBjAqzhQCw

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2244	mpv.exe
2244	mpv.exe
2244	mpv.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2244	mpv.exe

C:\Users\Admin\AppData\Local\Temp\mpv.exe
"C:\Users\Admin\AppData\Local\Temp\mpv.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2244-1-0x000000016D0C0000-0x000000016D0D0000-memory.dmp

Filesize
64KB

Download
memory/2244-0-0x000000016D0C0000-0x000000016D0D0000-memory.dmp

Filesize
64KB

Download
memory/2244-10-0x000000013FBF0000-0x0000000144DAE000-memory.dmp

Filesize
81.7MB

Download
memory/2244-12-0x000000013FBF0000-0x0000000144DAE000-memory.dmp

Filesize
81.7MB

Download