Analysis

  • max time kernel
    144s
  • max time network
    150s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-es
  • resource tags

    arch:x64arch:x86image:win10-20220812-eslocale:es-esos:windows10-1703-x64systemwindows
  • submitted
    29/12/2022, 09:13 UTC

General

  • Target

    MultiMC/imageformats/qjpeg.dll

  • Size

    246KB

  • MD5

    c228c1486e203d48d9c7d84d0b631e15

  • SHA1

    1ccdd75d6cd473d00aa17686ec98f509b1e8e360

  • SHA256

    a55cb801a07932d263c980b14abdb464acd8150b9258260efdf535634bfe9811

  • SHA512

    a649078738e69572276a37431c495582f933b04701deded8b5f6dd5b3c6d5b9d338ddb242b71659038d324ca74c2a8f2b229c7beba6f16ddea238f2bcbfae870

  • SSDEEP

    6144:jutAUtpjvlyaX8XZ99bkBRSMArBPkfB917Wu:jutAavlqJMArBPkf

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\MultiMC\imageformats\qjpeg.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3996
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\MultiMC\imageformats\qjpeg.dll,#1
      2⤵
        PID:4016

    Network

      No results found
    • 20.42.65.84:443
      322 B
      7
    • 209.197.3.8:80
      322 B
      7
    No results found

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4016-117-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-118-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-119-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-120-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-121-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-122-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-123-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-124-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-125-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-127-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-126-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-128-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-129-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-130-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-131-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-132-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-133-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-134-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-135-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-136-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-137-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-138-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-139-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-140-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-141-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-142-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-144-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-145-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-143-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-146-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-148-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-147-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-149-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-150-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-151-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-152-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-153-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-154-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-155-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-156-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-157-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-158-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-159-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-160-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-161-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-162-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-164-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-165-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-166-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    • memory/4016-163-0x0000000077380000-0x000000007750E000-memory.dmp

      Filesize

      1.6MB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.