Overview

overview

7

Static

static

3

OBS-Studio...er.exe

windows7-x64

7

OBS-Studio...er.exe

windows10-2004-x64

7

data/obs-p...64.pdb

windows7-x64

3

data/obs-p...64.pdb

windows10-2004-x64

3

data/obs-p...AZ.ini

windows7-x64

1

data/obs-p...AZ.ini

windows10-2004-x64

1

data/obs-p...BY.ini

windows7-x64

1

data/obs-p...BY.ini

windows10-2004-x64

1

data/obs-p...GB.ini

windows7-x64

1

data/obs-p...GB.ini

windows10-2004-x64

1

data/obs-p...FR.ini

windows7-x64

1

data/obs-p...FR.ini

windows10-2004-x64

1

data/obs-p...ID.ini

windows7-x64

1

data/obs-p...ID.ini

windows10-2004-x64

1

data/obs-p...KR.ini

windows7-x64

1

data/obs-p...KR.ini

windows10-2004-x64

1

data/obs-p...PL.ini

windows7-x64

1

data/obs-p...PL.ini

windows10-2004-x64

1

data/obs-s...on.dll

windows7-x64

1

data/obs-s...on.dll

windows10-2004-x64

1

data/obs-s...ua.dll

windows7-x64

1

data/obs-s...ua.dll

windows10-2004-x64

1

data/obs-s...hon.py

windows7-x64

3

data/obs-s...hon.py

windows10-2004-x64

3

obs-plugin...ja.pdb

windows7-x64

3

obs-plugin...ja.pdb

windows10-2004-x64

3

obs-plugin...af.pak

windows7-x64

3

obs-plugin...af.pak

windows10-2004-x64

3

obs-plugin...ge.exe

windows7-x64

1

obs-plugin...ge.exe

windows10-2004-x64

1

obs-plugin...er.dll

windows7-x64

1

obs-plugin...er.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    138s
  • max time network
    167s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/11/2024, 19:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    data/obs-scripting/64bit/obslua.dll

  • Size

    1.5MB

  • MD5

    a018add52940b9f3fe15281af380691b

  • SHA1

    8dbfbd9100c696bd525ea76c2139fad249d349a2

  • SHA256

    d1b95e5b39f2c59f97ccf6f0b863a94ee2438cadcc7d451adcc1c4f513e36693

  • SHA512

    acbcb160e25268e09527bd7b8dab37574f05602e100692b70226b8e4b1aac6600ba936e919a14d60f6fafadccd502522892c5df924c41a53d3d6a756eb8bfc16

  • SSDEEP

    12288:AnRQVZQ3KXwXnjGtsnLZqwccl5Yu/yRUJr2c1fRGPbI1JGyxHPZM9VqM5S:Sw2KX2CQLZ/c2YRRUJr7fRLJf05S

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\data\obs-scripting\64bit\obslua.dll,#1
    1⤵
      PID:3464

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads