Overview
overview
7Static
static
3karaokepla...up.exe
windows7-x64
7karaokepla...up.exe
windows10-2004-x64
7$PLUGINSDI...RL.dll
windows7-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ps.dll
windows7-x64
3$PLUGINSDI...ps.dll
windows10-2004-x64
3$SYSDIR/AlphaDIB.dll
windows7-x64
1$SYSDIR/AlphaDIB.dll
windows10-2004-x64
1$SYSDIR/COMDLG32.dll
windows7-x64
1$SYSDIR/COMDLG32.dll
windows10-2004-x64
1AlphaDIB.dll
windows7-x64
1AlphaDIB.dll
windows10-2004-x64
1COMDLG32.dll
windows7-x64
1COMDLG32.dll
windows10-2004-x64
1Effect.dll
windows7-x64
1Effect.dll
windows10-2004-x64
1Karaoke Player.exe
windows7-x64
7Karaoke Player.exe
windows10-2004-x64
7MSCOMCTL.dll
windows7-x64
1MSCOMCTL.dll
windows10-2004-x64
1MSVBVM60.dll
windows7-x64
1MSVBVM60.dll
windows10-2004-x64
1Mp3Enc.dll
windows7-x64
1Mp3Enc.dll
windows10-2004-x64
1Mp3Play.dll
windows7-x64
1Mp3Play.dll
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 19:13
Static task
static1
Behavioral task
behavioral1
Sample
karaokeplayersetup.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
karaokeplayersetup.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/ToolTips.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/ToolTips.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$SYSDIR/AlphaDIB.dll
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
$SYSDIR/AlphaDIB.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
$SYSDIR/COMDLG32.dll
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
$SYSDIR/COMDLG32.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
AlphaDIB.dll
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
AlphaDIB.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
COMDLG32.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
COMDLG32.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
Effect.dll
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
Effect.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Karaoke Player.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Karaoke Player.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
MSCOMCTL.dll
Resource
win7-20240419-en
Behavioral task
behavioral26
Sample
MSCOMCTL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
MSVBVM60.dll
Resource
win7-20240611-en
Behavioral task
behavioral28
Sample
MSVBVM60.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
Mp3Enc.dll
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
Mp3Enc.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
Mp3Play.dll
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
Mp3Play.dll
Resource
win10v2004-20240508-en
General
-
Target
$PLUGINSDIR/System.dll
-
Size
10KB
-
MD5
810f3a0aefe36a9f63e29e604bea91a9
-
SHA1
2559d3d4adf51f8ecbe2d07e669e344eb7d0bd80
-
SHA256
f160eb7a1b4eb8d2e99e7424ae058acd81ba5019e43cbfa0ce81e3102b356779
-
SHA512
836b73c38ab60260e1bc81ebf8347e14d02453fc361b7d6f10f137287b8189f8bc43758ce2d9def8fd1c71112aab7ef1930af2d64ae69f6d4e58a6fe17b310bb
-
SSDEEP
192:CO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1argMO:XKAFERdlxhGRYUzqZar
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2080 2216 WerFault.exe 28 -
Suspicious use of WriteProcessMemory 11 IoCs
description pid Process procid_target PID 1920 wrote to memory of 2216 1920 rundll32.exe 28 PID 1920 wrote to memory of 2216 1920 rundll32.exe 28 PID 1920 wrote to memory of 2216 1920 rundll32.exe 28 PID 1920 wrote to memory of 2216 1920 rundll32.exe 28 PID 1920 wrote to memory of 2216 1920 rundll32.exe 28 PID 1920 wrote to memory of 2216 1920 rundll32.exe 28 PID 1920 wrote to memory of 2216 1920 rundll32.exe 28 PID 2216 wrote to memory of 2080 2216 rundll32.exe 29 PID 2216 wrote to memory of 2080 2216 rundll32.exe 29 PID 2216 wrote to memory of 2080 2216 rundll32.exe 29 PID 2216 wrote to memory of 2080 2216 rundll32.exe 29
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1920 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#12⤵
- Suspicious use of WriteProcessMemory
PID:2216 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2216 -s 2243⤵
- Program crash
PID:2080
-
-