Overview
overview
7Static
static
7Mp3dllPleyer.exe
windows7-x64
1Mp3dllPleyer.exe
windows10-2004-x64
1UMp3dllPleyer.js
windows7-x64
1UMp3dllPleyer.js
windows10-2004-x64
1WinSkinData.js
windows7-x64
1WinSkinData.js
windows10-2004-x64
1mp3.dll
windows7-x64
1mp3.dll
windows10-2004-x64
1pvmp3.dll
windows7-x64
1pvmp3.dll
windows10-2004-x64
1新云软件.url
windows7-x64
1新云软件.url
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
05/03/2024, 05:02
Behavioral task
behavioral1
Sample
Mp3dllPleyer.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Mp3dllPleyer.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
UMp3dllPleyer.js
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
UMp3dllPleyer.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
WinSkinData.js
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
WinSkinData.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
mp3.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
mp3.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
pvmp3.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
pvmp3.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
新云软件.url
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
新云软件.url
Resource
win10v2004-20240226-en
General
-
Target
pvmp3.dll
-
Size
264KB
-
MD5
d61d477039bdf99c405a0b952fd382cc
-
SHA1
83af14c073e297c52f0456b3a7f8322baa7eb8a0
-
SHA256
ea2cc28429543a8f2372beef07e2745862d7a7d5bd4e62ac0a681745485cb32f
-
SHA512
5e57234d0ffd639b8aef2eea431bad358faaac9923323fab1b12b4edd1bac8651ae7d67b168b04617949169e1079a5225d3f23170db2467a0f66841ac35cb0a4
-
SSDEEP
6144:BXIpLpYED06dljyPu53GJxhJfOMBfcB8:BYYED0UVR0f9Oy
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2416 wrote to memory of 764 2416 rundll32.exe 28 PID 2416 wrote to memory of 764 2416 rundll32.exe 28 PID 2416 wrote to memory of 764 2416 rundll32.exe 28 PID 2416 wrote to memory of 764 2416 rundll32.exe 28 PID 2416 wrote to memory of 764 2416 rundll32.exe 28 PID 2416 wrote to memory of 764 2416 rundll32.exe 28 PID 2416 wrote to memory of 764 2416 rundll32.exe 28