Overview
overview
8Static
static
3OBS-Studio...er.exe
windows10-2004-x64
data/obs-p...64.exe
windows10-2004-x64
1data/obs-s...on.dll
windows10-2004-x64
1data/obs-s...ua.dll
windows10-2004-x64
1data/obs-s...hon.py
windows10-2004-x64
3obs-plugin...ja.dll
windows10-2004-x64
1obs-plugin...lf.dll
windows10-2004-x64
1obs-plugin...er.dll
windows10-2004-x64
1obs-plugin...ns.dll
windows10-2004-x64
1obs-plugin...ui.dll
windows10-2004-x64
1obs-plugin...nk.dll
windows10-2004-x64
1obs-plugin...ls.dll
windows10-2004-x64
1obs-plugin...ce.dll
windows10-2004-x64
1obs-plugin...GL.dll
windows10-2004-x64
1obs-plugin...ge.exe
windows10-2004-x64
1obs-plugin...er.dll
windows10-2004-x64
1obs-plugin...eg.dll
windows10-2004-x64
1obs-plugin...rs.dll
windows10-2004-x64
1obs-plugin...ts.dll
windows10-2004-x64
1obs-plugin...11.dll
windows10-2004-x64
1obs-plugin...xt.dll
windows10-2004-x64
1obs-plugin...ns.dll
windows10-2004-x64
1obs-plugin...st.dll
windows10-2004-x64
1obs-plugin...tc.dll
windows10-2004-x64
1obs-plugin...et.dll
windows10-2004-x64
1obs-plugin...64.dll
windows10-2004-x64
1obs-plugin...es.dll
windows10-2004-x64
1obs-plugin...e2.dll
windows10-2004-x64
1obs-plugin...eo.dll
windows10-2004-x64
1obs-plugin...re.dll
windows10-2004-x64
1obs-plugin...ow.dll
windows10-2004-x64
1obs-plugin...pi.dll
windows10-2004-x64
1Analysis
-
max time kernel
1782s -
max time network
1799s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
20/08/2024, 20:59
Static task
static1
Behavioral task
behavioral1
Sample
OBS-Studio-30.2.2-Windows-Installer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
data/obs-plugins/win-capture/inject-helper64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
data/obs-scripting/64bit/_obspython.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
data/obs-scripting/64bit/obslua.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
data/obs-scripting/64bit/obspython.py
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
obs-plugins/64bit/aja.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
obs-plugins/64bit/chrome_elf.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
obs-plugins/64bit/coreaudio-encoder.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
obs-plugins/64bit/decklink-captions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
obs-plugins/64bit/decklink-output-ui.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
obs-plugins/64bit/decklink.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
obs-plugins/64bit/frontend-tools.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
obs-plugins/64bit/image-source.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
obs-plugins/64bit/libEGL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
obs-plugins/64bit/obs-browser-page.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
obs-plugins/64bit/obs-browser.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
obs-plugins/64bit/obs-ffmpeg.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral18
Sample
obs-plugins/64bit/obs-filters.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
obs-plugins/64bit/obs-outputs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral20
Sample
obs-plugins/64bit/obs-qsv11.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
obs-plugins/64bit/obs-text.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral22
Sample
obs-plugins/64bit/obs-transitions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
obs-plugins/64bit/obs-vst.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral24
Sample
obs-plugins/64bit/obs-webrtc.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
obs-plugins/64bit/obs-websocket.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral26
Sample
obs-plugins/64bit/obs-x264.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
obs-plugins/64bit/rtmp-services.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral28
Sample
obs-plugins/64bit/text-freetype2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
obs-plugins/64bit/vlc-video.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral30
Sample
obs-plugins/64bit/win-capture.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
obs-plugins/64bit/win-dshow.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral32
Sample
obs-plugins/64bit/win-wasapi.dll
Resource
win10v2004-20240802-en
General
-
Target
obs-plugins/64bit/obs-outputs.dll
-
Size
792KB
-
MD5
dde5199f9d88ea69ffbd2f508cc44fd3
-
SHA1
aab080d0016eef60f836f230678b514698f2b61a
-
SHA256
fd223a675f444074aa53d6f8ecaa65b87aa4c05bb386a09e8a38600cc971dcfb
-
SHA512
a15dec18b7e0aee2157127abce49126d0917fbac5d8b7b6d569812b4b2e97b38c90465e4dbb17794c450635728ca70f5757a363afe9f507016c1d4c5891b65ef
-
SSDEEP
12288:ZHVHdohH4kvTqV0VvCGRjXdy6U5fMWZmc5h57la3RjsUCl:ZHgYk7dVvCGRjXdy6UWZc5bg+l
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\obs-plugins\64bit\obs-outputs.dll,#11⤵PID:4856
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4148,i,16315016104747277319,5510969007830467313,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:81⤵PID:5012