f79d8599c91012e638effcf93389daa93137133d1ab5199fd34f0fc71237750d

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25/06/2024, 16:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

avfilter-1.dll
Size

128KB
MD5

3c1bce4d0aa5bcd8fe9217079c360b4c
SHA1

3126c878e990c0be51682ee7ea38505eca1e60e7
SHA256

8a6a1bee64b29985398784c8897c6271d5378b3f89f38fe7f728e509bbce6b5e
SHA512

c33230636c7a52a98b5c83d500dfb9548b8b172c861d07c6b204e54cf97a037588329cd62be88ef419fa217b5c9450d22c633a52b79fe7d893381cf54e884016
SSDEEP

3072:hVQEMxrRBakvl1y3m7RinaVOYn2OSVsw:clakDy3m7RiTY2OKsw

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1164 wrote to memory of 2020	1164	rundll32.exe	28
PID 1164 wrote to memory of 2020	1164	rundll32.exe	28
PID 1164 wrote to memory of 2020	1164	rundll32.exe	28
PID 1164 wrote to memory of 2020	1164	rundll32.exe	28
PID 1164 wrote to memory of 2020	1164	rundll32.exe	28
PID 1164 wrote to memory of 2020	1164	rundll32.exe	28
PID 1164 wrote to memory of 2020	1164	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\avfilter-1.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1164
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\avfilter-1.dll,#1
  2⤵
  PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2020-0-0x00000000001F0000-0x0000000000218000-memory.dmp

Filesize
160KB

Download
memory/2020-1-0x0000000063240000-0x0000000063255000-memory.dmp

Filesize
84KB

Download
memory/2020-6-0x0000000063240000-0x0000000063255000-memory.dmp

Filesize
84KB

Download
memory/2020-5-0x0000000063240000-0x0000000063255000-memory.dmp

Filesize
84KB

Download
memory/2020-4-0x0000000063240000-0x0000000063255000-memory.dmp

Filesize
84KB

Download
memory/2020-3-0x0000000063240000-0x0000000063255000-memory.dmp

Filesize
84KB

Download
memory/2020-2-0x0000000063240000-0x0000000063255000-memory.dmp

Filesize
84KB

Download
memory/2020-9-0x0000000063240000-0x0000000063255000-memory.dmp

Filesize
84KB

Download
memory/2020-8-0x0000000063241000-0x000000006324C000-memory.dmp

Filesize
44KB

Download
memory/2020-22-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-23-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-64-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-62-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-60-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-58-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-56-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-54-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-53-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-51-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-49-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-47-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-45-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-43-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-41-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-39-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-37-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-35-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-33-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-31-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-29-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-28-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-26-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-24-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-21-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-19-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-18-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-15-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-65-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-63-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-61-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-59-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-57-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-55-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-52-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-50-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-48-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-46-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-44-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-42-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-40-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-38-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-36-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-34-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-32-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-30-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-27-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-25-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-20-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-17-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-16-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-14-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-13-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-12-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-11-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-10-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download
memory/2020-7-0x000000006AD40000-0x000000006BCAC000-memory.dmp

Filesize
15.4MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads