52c7d5ac19fcf8264fb2e662a55500911440d9675056e5337add79ab4496c172 | Triage

Analysis

max time kernel
132s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28/05/2024, 10:10

Sharing

Report Analysis Logs

General

Target

mpv.exe
Size

70.9MB
MD5

6a13bc3b4c271a6c9b06e7c9cedd33c4
SHA1

8b8a4f712de0b406be15020a329767edc4158b9b
SHA256

52c7d5ac19fcf8264fb2e662a55500911440d9675056e5337add79ab4496c172
SHA512

721460dd0994e289dd9f45db397e3b4c35d284ee087b7866d3a1c3f2fcf7c37ac66eeef512360d8972fcc5e92baa800643a7d3ee684e24ce64885b254e055fcd
SSDEEP

786432:3lsB6sSn7wA2k67JGkr6PKmaqXarNd+IFxBjAqzh7MaxLvdRrw:WNY7A7JGkr6ydN8IFxBjAqzhQCw

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1256	mpv.exe
1256	mpv.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1256	mpv.exe

C:\Users\Admin\AppData\Local\Temp\mpv.exe
"C:\Users\Admin\AppData\Local\Temp\mpv.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:1256

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1256-1-0x00007FF76C500000-0x00007FF76C510000-memory.dmp

Filesize
64KB

Download
memory/1256-0-0x00007FF76C500000-0x00007FF76C510000-memory.dmp

Filesize
64KB

Download
memory/1256-2-0x00007FF73F030000-0x00007FF7441EE000-memory.dmp

Filesize
81.7MB

Download
memory/1256-4-0x00007FF73F030000-0x00007FF7441EE000-memory.dmp

Filesize
81.7MB

Download