Overview
overview
8Static
static
8EThread.dll
windows7-x64
1EThread.dll
windows10-2004-x64
1HtmlView.dll
windows7-x64
1HtmlView.dll
windows10-2004-x64
1dp1.dll
windows7-x64
1dp1.dll
windows10-2004-x64
3eAPI.dll
windows7-x64
1eAPI.dll
windows10-2004-x64
1iext.dll
windows7-x64
1iext.dll
windows10-2004-x64
1internet.dll
windows7-x64
1internet.dll
windows10-2004-x64
1krnln.dll
windows7-x64
1krnln.dll
windows10-2004-x64
1shellEx.dll
windows7-x64
1shellEx.dll
windows10-2004-x64
1sock.dll
windows7-x64
1sock.dll
windows10-2004-x64
1spec.dll
windows7-x64
1spec.dll
windows10-2004-x64
1下载王�...om.url
windows7-x64
1下载王�...om.url
windows10-2004-x64
1酷奇自�...��.exe
windows7-x64
8酷奇自�...��.exe
windows10-2004-x64
8Analysis
-
max time kernel
167s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 04:44
Behavioral task
behavioral1
Sample
EThread.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
EThread.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
HtmlView.dll
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
HtmlView.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
dp1.dll
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
dp1.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
eAPI.dll
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
eAPI.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
iext.dll
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
iext.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
internet.dll
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
internet.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
krnln.dll
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
krnln.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
shellEx.dll
Resource
win7-20220901-en
Behavioral task
behavioral16
Sample
shellEx.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
sock.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
sock.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
spec.dll
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
spec.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
下载王绿色软件站- xzking.com.url
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
下载王绿色软件站- xzking.com.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral23
Sample
酷奇自动qq消息软件V1.2破解版.exe
Resource
win7-20221111-en
General
-
Target
eAPI.dll
-
Size
320KB
-
MD5
75e3942b26c39888cc2ee9b732a101c8
-
SHA1
31fafc5d186101da0a546ff044765e5e22efadbd
-
SHA256
dc48317159bbdb48ce79932411561c2be9efc3ce952dfd698609bd4033256f05
-
SHA512
c664365c20fc2da3117f142f819961a7db29c3bc4a453fefdfc534e34a4c1012794c58915183822e7ff7f05c604c321c5ce1631c1fc9a97c37ebc5b4322bf040
-
SSDEEP
6144:yVv24BZWu21ov/di3CqinRzQA4WVEuwQ+jNb:yVvHop8SCqgrvvwQ8
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 640 wrote to memory of 1812 640 rundll32.exe rundll32.exe PID 640 wrote to memory of 1812 640 rundll32.exe rundll32.exe PID 640 wrote to memory of 1812 640 rundll32.exe rundll32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1812-132-0x0000000000000000-mapping.dmp