Resubmissions

11-07-2024 20:44

240711-zjbl5stbjk 7

11-07-2024 20:30

240711-y939easfqk 7

Analysis

  • max time kernel
    592s
  • max time network
    446s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    11-07-2024 20:30

General

  • Target

    mpv.exe

  • Size

    70.9MB

  • MD5

    6a13bc3b4c271a6c9b06e7c9cedd33c4

  • SHA1

    8b8a4f712de0b406be15020a329767edc4158b9b

  • SHA256

    52c7d5ac19fcf8264fb2e662a55500911440d9675056e5337add79ab4496c172

  • SHA512

    721460dd0994e289dd9f45db397e3b4c35d284ee087b7866d3a1c3f2fcf7c37ac66eeef512360d8972fcc5e92baa800643a7d3ee684e24ce64885b254e055fcd

  • SSDEEP

    786432:3lsB6sSn7wA2k67JGkr6PKmaqXarNd+IFxBjAqzh7MaxLvdRrw:WNY7A7JGkr6ydN8IFxBjAqzhQCw

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\mpv.exe
    "C:\Users\Admin\AppData\Local\Temp\mpv.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/764-1-0x00007FF7DE4C0000-0x00007FF7DE4D0000-memory.dmp

    Filesize

    64KB

  • memory/764-0-0x00007FF7DE4C0000-0x00007FF7DE4D0000-memory.dmp

    Filesize

    64KB

  • memory/764-2-0x00007FF7B0FF0000-0x00007FF7B61AE000-memory.dmp

    Filesize

    81.7MB