Analysis

  • max time kernel
    141s
  • max time network
    139s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    02/09/2024, 00:20

General

  • Target

    yuzu-windows-msvc-early-access/avfilter-9.dll

  • Size

    185KB

  • MD5

    4a179c54e5ec40f1f5f3f203097379b4

  • SHA1

    0d32386f747bbd3709fbd640c1f889977f6fc245

  • SHA256

    f5a711366db653732eeb451cce14caf027f0515b8dc11e2e02e908b9cca3ae20

  • SHA512

    94ff6a31dbee539016b82cb64a23cae3db7620385e0c2489242d221ce79bec9b15fafd01ed136a591e90545be166a8fc03921d461c91c7a10a8a4708bd32e849

  • SSDEEP

    3072:+Q/li9zfC/B74eSWmJgbDBA53g+TXxrXKss/p:F/li9z27SWmJQ8TBKssR

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\yuzu-windows-msvc-early-access\avfilter-9.dll,#1
    1⤵
      PID:4720

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4720-7-0x00007FF948860000-0x00007FF948877000-memory.dmp

      Filesize

      92KB

    • memory/4720-6-0x00007FF941670000-0x00007FF941877000-memory.dmp

      Filesize

      2.0MB

    • memory/4720-5-0x00007FF941880000-0x00007FF941926000-memory.dmp

      Filesize

      664KB

    • memory/4720-4-0x00007FF9451D0000-0x00007FF945208000-memory.dmp

      Filesize

      224KB