9fd10bf47b3cc8064550344ccc5bd40f94072ccca78254b7e464ec6f8bcf03ca

Analysis

max time kernel
123s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20230831-en
resource tags

arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
submitted
07-09-2023 09:51

Target

SkySky/QQMusic.dll
Size

58KB
MD5

d3061f1f67664394011febe9f53664f2
SHA1

b0353a66c1d481cb7c49e2f2037de40fcb6a91dc
SHA256

bbd6380dc9652016eea5163fdfb933add8c3e06a88b627ec66007d19f549d4c8
SHA512

88bf39d51c5701acaa9d4117498df35937b96bed9910c09ed9f6f29eb453a115b4504689bbaddb88fef3dd70ea51ce2b3c05ffe33654cf5aa659a5f88e600777
SSDEEP

1536:Lchn8YlIiozzzFTiSltPpVAQvt03x/qWfI:LAtlxGvPpVAstYn

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3884	3408	WerFault.exe	85

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 208 wrote to memory of 3408	208	regsvr32.exe	85
PID 208 wrote to memory of 3408	208	regsvr32.exe	85
PID 208 wrote to memory of 3408	208	regsvr32.exe	85

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\SkySky\QQMusic.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:208
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\SkySky\QQMusic.dll
  2⤵
  PID:3408
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 3408 -s 612
    3⤵
    - Program crash
    PID:3884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3408 -ip 3408
1⤵
PID:856

memory/3408-0-0x0000000010000000-0x000000001001E000-memory.dmp

Filesize
120KB

Download
memory/3408-1-0x0000000001120000-0x000000000113F000-memory.dmp

Filesize
124KB

Download
memory/3408-2-0x0000000001140000-0x000000000114C000-memory.dmp

Filesize
48KB

Download
memory/3408-3-0x0000000010000000-0x000000001001E000-memory.dmp

Filesize
120KB

Download
memory/3408-4-0x0000000010000000-0x000000001001E000-memory.dmp

Filesize
120KB

Download
memory/3408-5-0x0000000010000000-0x000000001001E000-memory.dmp

Filesize
120KB

Download