H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2024-4978

Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256: 421a4ad2615941b177b6ec4ab5e239c14e62af2ab07c6df1741e2a62223223c4). When run, this creates a backdoor connection to a malicious C2 server.

Vulnerability
TypeVulnerability
External ID—
First seen2024-05-29
Last seen2024-05-29

Confidence

—

Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256: 421a4ad2615941b177b6ec4ab5e239c14e62af2ab07c6df1741e2a62223223c4). When run, this creates a backdoor connection to a malicious C2 server.

Labels

exploitedkev

CISA KEV context

Vendor / productJustice AV Solutions Viewer
Added2024-05-29
Due date2024-06-19
4 recorded

Relationships

mitigates
from Remediate CVE-2024-4978
Mitigation
related-to
to Embed Virus into DLL
Technique
related-to
to Hiding Malicious Data or Code within Files
Technique
related-to
to Infected Software
Technique
2 external

References

nvd
CVE-2024-4978
open
cwe
CWE-506
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance