ab4a56c15a295dda8f74a63cd34c4c7d7e770b5687fe6a346ea081f12dd7aeff | Triage

Analysis

max time kernel
117s
max time network
125s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05-09-2024 00:41

Sharing

Report Analysis Logs

General

Target

avcodec-60.dll
Size

12.2MB
MD5

0d8479c11aca0694a4e80492e8820df7
SHA1

b737e753a00743ce3db35a885e235f8e6d7d078f
SHA256

8c928b6e0ac04da4619f671ebe0d8ff1c0059efc8a2a207adc2d95925c3a6019
SHA512

8210470edb0e9a96c4d5d224cbe7f047f520e871379fd09baaad3a58dd9e38db81bf4443d3a27dad2cd5607ac4a531507b525f2b39607066c1da8178fe2cf82a
SSDEEP

196608:k2OMOKj4vW05k0p0jNIFMPqsucQ32fOhAaG:uMDjF067WfsucQ3282

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2372 wrote to memory of 2072	2372	rundll32.exe	30
PID 2372 wrote to memory of 2072	2372	rundll32.exe	30
PID 2372 wrote to memory of 2072	2372	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\avcodec-60.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2372
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2372 -s 128
  2⤵
  PID:2072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads