Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/05/2024, 13:58

General

  • Target

    $R1/mplayerc.exe

  • Size

    4.2MB

  • MD5

    e379e2e71017a9c9dccc0745dcc93513

  • SHA1

    a22081f0620fc1c93c2816b8e87559eb962d6dc4

  • SHA256

    fe2bceb7f99dfc746c8f76aa9a3120ab6716cb17d356d5ef95f4fb84a69d8039

  • SHA512

    427d35ac0438ae1d70b16b5ba155070a23712b63858b8bf21a780af4201eef6ed6a9df3a1e6f7abb3ac4d24c7b75ba84c1b994f8837eee289a5a6b5c7799605f

  • SSDEEP

    98304:ttMTnL3f/iIcTXZR1qU7FWG9MMVbFqo5cs+lzamVqIARzAXos3wcYM1dYoUAxdEr:nkbeNR9Lqo5cs+lzamVqIARzAXos3wcE

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$R1\mplayerc.exe
    "C:\Users\Admin\AppData\Local\Temp\$R1\mplayerc.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4020-0-0x00000000004AB000-0x00000000004AC000-memory.dmp

    Filesize

    4KB

  • memory/4020-1-0x0000000000400000-0x000000000084A000-memory.dmp

    Filesize

    4.3MB

  • memory/4020-2-0x0000000000400000-0x000000000084A000-memory.dmp

    Filesize

    4.3MB

  • memory/4020-3-0x0000000000400000-0x000000000084A000-memory.dmp

    Filesize

    4.3MB

  • memory/4020-4-0x0000000000400000-0x000000000084A000-memory.dmp

    Filesize

    4.3MB

  • memory/4020-5-0x0000000000400000-0x000000000084A000-memory.dmp

    Filesize

    4.3MB

  • memory/4020-6-0x0000000000400000-0x000000000084A000-memory.dmp

    Filesize

    4.3MB

  • memory/4020-7-0x0000000000400000-0x000000000084A000-memory.dmp

    Filesize

    4.3MB

  • memory/4020-8-0x0000000000400000-0x000000000084A000-memory.dmp

    Filesize

    4.3MB

  • memory/4020-9-0x0000000000400000-0x000000000084A000-memory.dmp

    Filesize

    4.3MB

  • memory/4020-10-0x0000000000400000-0x000000000084A000-memory.dmp

    Filesize

    4.3MB

  • memory/4020-11-0x0000000000400000-0x000000000084A000-memory.dmp

    Filesize

    4.3MB