b00d0a0f78fcce81c653972072faf8bcacba8967d5bfa97ad88bfc90d54d0eaf | Triage

Submit
Reports

Overview

overview

9

Static

static

3

node_manager.exe

windows7-x64

7

node_manager.exe

windows10-2004-x64

9

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

LICENSES.c...m.html

windows7-x64

3

LICENSES.c...m.html

windows10-2004-x64

3

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

node_manager-ns.exe

windows10-2004-x64

7

node_modul...i.node

ubuntu-18.04-amd64

node_modul...i.node

debian-9-armhf

node_modul...i.node

debian-9-mips

node_modul...i.node

debian-9-mipsel

node_modul...i.node

ubuntu-22.04-amd64

1

node_modul...i.node

ubuntu-20.04-amd64

1

node_modul...i.node

ubuntu-18.04-amd64

node_modul...i.node

debian-9-armhf

node_modul...i.node

debian-9-mips

node_modul...i.node

debian-9-mipsel

node_modul...i.node

debian-12-armhf

1

node_modul...i.node

ubuntu-20.04-amd64

1

node_modul...i.node

ubuntu-18.04-amd64

node_modul...i.node

debian-9-armhf

node_modul...i.node

debian-9-mips

node_modul...i.node

debian-9-mipsel

node_modul...i.node

ubuntu-22.04-amd64

1

node_modul...i.node

ubuntu-20.04-amd64

1

node_modul...i.node

ubuntu-24.04-amd64

1

Resubmissions

01-08-2024 21:24

240801-z9cxws1cjd 9

31-07-2024 11:45

240731-nwq2ta1enn 9

Analysis

max time kernel
89s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20240730-en
resource tags

arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
submitted
31-07-2024 11:45

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

node_manager.exe

Resource

win7-20240708-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

node_manager.exe

Resource

win10v2004-20240730-en

credential_access discovery execution spyware stealer

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win7-20240729-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win7-20240704-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

LICENSES.chromium.html

Resource

win7-20240708-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

LICENSES.chromium.html

Resource

win10v2004-20240730-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

d3dcompiler_47.dll

Resource

win10v2004-20240730-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

ffmpeg.dll

Resource

win10v2004-20240730-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

libEGL.dll

Resource

win10v2004-20240730-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

libGLESv2.dll

Resource

win10v2004-20240730-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

node_manager-ns.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral14

Sample

node_modules/koffi/build/koffi/freebsd_arm64/koffi.node

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

node_modules/koffi/build/koffi/freebsd_arm64/koffi.node

Resource

debian9-armhf-20240729-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

node_modules/koffi/build/koffi/freebsd_arm64/koffi.node

Resource

debian9-mipsbe-20240418-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

node_modules/koffi/build/koffi/freebsd_arm64/koffi.node

Resource

debian9-mipsel-20240611-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

node_modules/koffi/build/koffi/freebsd_ia32/koffi.node

Resource

ubuntu2204-amd64-20240611-en

ubuntu-22.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

node_modules/koffi/build/koffi/freebsd_x64/koffi.node

Resource

ubuntu2004-amd64-20240611-en

ubuntu-20.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

node_modules/koffi/build/koffi/linux_arm64/koffi.node

Resource

ubuntu1804-amd64-20240729-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

node_modules/koffi/build/koffi/linux_arm64/koffi.node

Resource

debian9-armhf-20240611-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

node_modules/koffi/build/koffi/linux_arm64/koffi.node

Resource

debian9-mipsbe-20240418-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

node_modules/koffi/build/koffi/linux_arm64/koffi.node

Resource

debian9-mipsel-20240611-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

node_modules/koffi/build/koffi/linux_armhf/koffi.node

Resource

debian12-armhf-20240221-en

debian-12-armhf

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

node_modules/koffi/build/koffi/linux_ia32/koffi.node

Resource

ubuntu2004-amd64-20240508-en

ubuntu-20.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

node_modules/koffi/build/koffi/linux_riscv64d/koffi.node

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

node_modules/koffi/build/koffi/linux_riscv64d/koffi.node

Resource

debian9-armhf-20240729-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

node_modules/koffi/build/koffi/linux_riscv64d/koffi.node

Resource

debian9-mipsbe-20240611-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

node_modules/koffi/build/koffi/linux_riscv64d/koffi.node

Resource

debian9-mipsel-20240226-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

node_modules/koffi/build/koffi/linux_x64/koffi.node

Resource

ubuntu2204-amd64-20240729-en

ubuntu-22.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

node_modules/koffi/build/koffi/openbsd_ia32/koffi.node

Resource

ubuntu2004-amd64-20240508-en

ubuntu-20.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

node_modules/koffi/build/koffi/openbsd_x64/koffi.node

Resource

ubuntu2404-amd64-20240523-en

ubuntu-24.04-amd64

0 signatures

150 seconds

Report Analysis Logs

General

Target

ffmpeg.dll
Size

2.6MB
MD5

bf71f43a11049f853e72c0b1552926bc
SHA1

75bcc1f3f5e515491b32202ac3fab2e2f4f40aa5
SHA256

1178ebc025d6309975aa35dc37e3d9b400b5ef0b17ee4ee70e8c7f0585dc5f62
SHA512

8ac6c94d49a33dac22edc0a73b95d09a5da18fe56301304acf43b600065775871621b80c7ccad9c1c0dc451b4fbb9adbdf46db7db1b054ab2ef80c29f0766223
SSDEEP

49152:r1nRu1gjn93AXtsX7I8g4AScbz6Ox+pen6yfmb+ST1PqRrY3:rJsf83Sn6Ox+tP53

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ffmpeg.dll,#1
1⤵
PID:4712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy