Analysis

  • max time kernel
    145s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-11-2022 01:39

General

  • Target

    DPlayer_lv/libeay32.dll

  • Size

    995KB

  • MD5

    ce4dd10bde6f69fd3affbab1bf799c1e

  • SHA1

    a7c0f9eb899d606baa7e2a01e48d9c7098b27ca1

  • SHA256

    dbb7280d2fa2924b52d3be1617f399ac5b6801ca2497aa39b46a41cc931860dd

  • SHA512

    dedff320a26ef4ccfab89fa7619bd125c5dab39186ae167424e093ae0247394f6f1d10e89edb3acbe38b4842a9adf6182ea4b4fbf3e5c8487246883aeead3c73

  • SSDEEP

    12288:fDOiZOS6Vbf1xnugEIgTah4cTxdHnqgsRSCs9dAqiW1/C3XfNKreypkbWOsassJa:+CdcTxdHxpThLAfNCp/sXJmVfGyZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\DPlayer_lv\libeay32.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2024
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\DPlayer_lv\libeay32.dll,#1
      2⤵
        PID:1540

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1540-132-0x0000000000000000-mapping.dmp