Overview

overview

6

Static

static

3

0ebfb3fd77...18.exe

windows7-x64

3

0ebfb3fd77...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

YQL_Lyrics_Common.dll

windows7-x64

1

YQL_Lyrics_Common.dll

windows10-2004-x64

1

YiqilaiLyrics.dll

windows7-x64

1

YiqilaiLyrics.dll

windows10-2004-x64

1

YiqilaiLyrics.exe

windows7-x64

1

YiqilaiLyrics.exe

windows10-2004-x64

1

foo_ui_columns.dll

windows7-x64

1

foo_ui_columns.dll

windows10-2004-x64

1

foo_ui_yqllyrics.dll

windows7-x64

1

foo_ui_yqllyrics.dll

windows10-2004-x64

1

gen_yqllyrics.dll

windows7-x64

1

gen_yqllyrics.dll

windows10-2004-x64

1

vis_yqllyrics.dll

windows7-x64

1

vis_yqllyrics.dll

windows10-2004-x64

1

Ò»ÆðÀ...ú.url

windows7-x64

6

Ò»ÆðÀ...ú.url

windows10-2004-x64

3

Analysis

  • max time kernel
    145s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-06-2024 16:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    YiqilaiLyrics.exe

  • Size

    223KB

  • MD5

    ae7f297b319bce3538bb1e4bf1e6e086

  • SHA1

    8b9e66e2826bf406502d92b2d7e903390fe0b1d9

  • SHA256

    f29666b7696eb4623b7c1c4e0065c436d1ec50c8c46fd97aa3fd063f1ccc313e

  • SHA512

    e397cef50a6451428fb725ae19aa20e648c9de094bca682bb2ff5e414fe24070929aaa3412af113c99892c34766ea788a5263236ffdf9cc3e6d911e2bd2c38e1

  • SSDEEP

    3072:++rDkp6ooNIzKMeUzHLqETXLTdE9nqODJgtQQwEH9tty2duoq+4ljoQ:7ooOLqKXLxE/RQVtnAoq+4p

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\YiqilaiLyrics.exe
    "C:\Users\Admin\AppData\Local\Temp\YiqilaiLyrics.exe"
    1⤵
      PID:2708
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=2708,i,8660989700097327804,17931739887231169645,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:8
      1⤵
        PID:2012

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2708-0-0x00000000005E0000-0x00000000005E1000-memory.dmp

        Filesize

        4KB

        Download