Analysis

  • max time kernel
    51s
  • max time network
    104s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-11-2022 23:01

General

  • Target

    DPlayerGR(play.jb51.net)/dplayerax.dll

  • Size

    462KB

  • MD5

    8fb3ae453b131efbfbdfa429c7a80d4e

  • SHA1

    bdd7da2ea76ed9314e62b09b92894bc02cde01bf

  • SHA256

    d411fcf02af861c547a921dc95b3fd50aec43ede5472a5f1104e607d48796078

  • SHA512

    92dcce48fa2d4da6bae36e162b8abdf7af986cd7b43c67b35431e6ce28315576bfc944cfce714830eb6858515ef0076435a9b8d1655b05a5a4597f08d915ea72

  • SSDEEP

    6144:Q2wLggWGvdRAb3ffDNT+n3gQhdB9E8HhSPDqPYkaRIq+c1fcUwkRA2XZ9fVd58V:IdWS6Lf/hkYvUdmAMoU

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\DPlayerGR(play.jb51.net)\dplayerax.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4976
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\DPlayerGR(play.jb51.net)\dplayerax.dll
      2⤵
        PID:1540

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1540-132-0x0000000000000000-mapping.dmp

    • memory/1540-133-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-135-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-136-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-137-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-138-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-139-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-140-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-141-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-142-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-143-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-144-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-145-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-146-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-147-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-148-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-149-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-150-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-151-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-152-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-153-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-154-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-155-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-156-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-157-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-158-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-159-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-160-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-161-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-162-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-163-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-165-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-166-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-168-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-169-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-170-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-171-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-172-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-174-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-176-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB

    • memory/1540-177-0x0000000002830000-0x0000000004CD6000-memory.dmp

      Filesize

      36.6MB