Overview
overview
7Static
static
3SkinSE.dll
windows7-x64
1SkinSE.dll
windows10-2004-x64
1msvcp100.dll
windows7-x64
3msvcp100.dll
windows10-2004-x64
3msvcr100.dll
windows7-x64
3msvcr100.dll
windows10-2004-x64
3下载软�...��.url
windows7-x64
1下载软�...��.url
windows10-2004-x64
1斗战神�...��.exe
windows7-x64
7斗战神�...��.exe
windows10-2004-x64
7Analysis
-
max time kernel
51s -
max time network
53s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
16-06-2024 20:19
Static task
static1
Behavioral task
behavioral1
Sample
SkinSE.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
SkinSE.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
msvcp100.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
msvcp100.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
msvcr100.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
msvcr100.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
下载软件_免费下载单机游戏_手机游戏下载大全_psp游戏_下载快播.url
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
下载软件_免费下载单机游戏_手机游戏下载大全_psp游戏_下载快播.url
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
斗战神小梁辅助.exe
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
斗战神小梁辅助.exe
Resource
win10v2004-20240508-en
General
-
Target
SkinSE.dll
-
Size
912KB
-
MD5
535529273df381303b2131d4e849e365
-
SHA1
1a8697955b1ffb2bcc51ea4d547aa89afb698cf8
-
SHA256
40f77ef4ae16863ff4e817d8da57e89f4b4eaef6560b10ba31727726c1d5d00d
-
SHA512
7592f5d99d933e0b0e886dc60db8e536c0290b496df482aa20c1a880673ed32700f3281aa57a7378e8905138fc3c32d5eea301f1ec034e94bba68fd5bebd33fd
-
SSDEEP
24576:nYvsPHKc+ml7OaPrGNRDox4HH34hsRc78YrESp/r2LnaDZJ3yFxo+SPpFLbKcTfN:96P7FxoRF7T9Yg
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid Process procid_target PID 4672 wrote to memory of 2176 4672 rundll32.exe 80 PID 4672 wrote to memory of 2176 4672 rundll32.exe 80 PID 4672 wrote to memory of 2176 4672 rundll32.exe 80