Overview

overview

9

Static

static

3

UnderWarWater.exe

windows7-x64

9

UnderWarWater.exe

windows10-2004-x64

9

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

LICENSES.c...m.html

windows7-x64

3

LICENSES.c...m.html

windows10-2004-x64

4

UnderWarWater.exe

windows10-2004-x64

9

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/...sar.js

ubuntu-18.04-amd64

3

resources/...sar.js

debian-9-armhf

4

resources/...sar.js

debian-9-mips

1

resources/...sar.js

debian-9-mipsel

1

resources/...sar.js

windows7-x64

3

resources/...sar.js

windows10-2004-x64

3

resources/...lfs.js

windows7-x64

3

resources/...lfs.js

windows10-2004-x64

3

resources/...isk.js

windows7-x64

3

resources/...isk.js

windows10-2004-x64

3

resources/...tem.js

windows7-x64

3

resources/...tem.js

windows10-2004-x64

3

resources/...ity.js

windows7-x64

3

resources/...ity.js

windows10-2004-x64

3

resources/...kle.js

windows7-x64

3

resources/...kle.js

windows10-2004-x64

3

resources/...lob.js

windows7-x64

3

Analysis

  • max time kernel
    98s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/03/2025, 12:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ffmpeg.dll

  • Size

    2.9MB

  • MD5

    929482816404b0cef4164477c6235198

  • SHA1

    ff92ad7fcc5c7ea427314f225bdd7aba16bb04ed

  • SHA256

    8e0a71294245c97616a15238974c54ce372b407c042b935904765c915cd003ee

  • SHA512

    5dd326d5943309f2606b329c8068e14aa7f1872f664eaae9a0937952e21d7a5ecc6ce21ea33a6e91a1e0840489261296210e83724a2f97051e19e4982acaad81

  • SSDEEP

    49152:SJcctgGDcyjVMLp2GDv6ZHIY1LYa12wL5tRGBnlqbAuHYUftjdljoyLFc6eFLkU8:S/+mI7Dv2HIY1LoqbAuHYUftjdljoyLp

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ffmpeg.dll,#1
    1⤵
      PID:5944

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads