Analysis

  • max time kernel
    194s
  • max time network
    211s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-11-2022 01:39

General

  • Target

    DPlayer_lv/dplayerax.dll

  • Size

    462KB

  • MD5

    8fb3ae453b131efbfbdfa429c7a80d4e

  • SHA1

    bdd7da2ea76ed9314e62b09b92894bc02cde01bf

  • SHA256

    d411fcf02af861c547a921dc95b3fd50aec43ede5472a5f1104e607d48796078

  • SHA512

    92dcce48fa2d4da6bae36e162b8abdf7af986cd7b43c67b35431e6ce28315576bfc944cfce714830eb6858515ef0076435a9b8d1655b05a5a4597f08d915ea72

  • SSDEEP

    6144:Q2wLggWGvdRAb3ffDNT+n3gQhdB9E8HhSPDqPYkaRIq+c1fcUwkRA2XZ9fVd58V:IdWS6Lf/hkYvUdmAMoU

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\DPlayer_lv\dplayerax.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3664
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\DPlayer_lv\dplayerax.dll
      2⤵
        PID:1400

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1400-132-0x0000000000000000-mapping.dmp

    • memory/1400-133-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-135-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-136-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-137-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-138-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-139-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-140-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-141-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-142-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-143-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-144-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-145-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-146-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-147-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-148-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-149-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-150-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-151-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-152-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-153-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-155-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-158-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-160-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-159-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-161-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-162-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-163-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-164-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-165-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-166-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-167-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-168-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-170-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-171-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-172-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-173-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-174-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-175-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-177-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-178-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-179-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-180-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-181-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-184-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB

    • memory/1400-185-0x00000000029E0000-0x0000000004E86000-memory.dmp

      Filesize

      36.6MB