2ef69f36d3a99e423ae6b8de52168fd26656d0c274845270000b013043daac7e

Analysis

max time kernel
52s
max time network
179s
platform
windows10-1703_x64
resource
win10-20220812-es
resource tags

arch:x64arch:x86image:win10-20220812-eslocale:es-esos:windows10-1703-x64systemwindows
submitted
29-12-2022 09:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MultiMC/imageformats/qsvg.dll
Size

28KB
MD5

7eb5b428de2fd5ce7f361bbf3d6aada4
SHA1

318acc5132492347727bde7ed70516150144b140
SHA256

c818b37d77c84e3a9963a761bae3eefc73cccd3485ee6cb1c085c670041e9c59
SHA512

681fb8a700aee5f44cf1f328c2fea157a98dab12e287f686d408584b5096ac262cb5cd2b2ff1f3c1b6e55d374ade2236118f41ec9c14fbec7014aae0683c1e5d
SSDEEP

384:0F2Z2Eg8ESscKYkiluz0RdysDv2IWsTmqK5J5:SqESTnDRbWH1J

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 4404 wrote to memory of 4224	4404	rundll32.exe	rundll32.exe
PID 4404 wrote to memory of 4224	4404	rundll32.exe	rundll32.exe
PID 4404 wrote to memory of 4224	4404	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\MultiMC\imageformats\qsvg.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4404
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\MultiMC\imageformats\qsvg.dll,#1
  2⤵
  PID:4224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4224-115-0x0000000000000000-mapping.dmp

Download
memory/4224-116-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-117-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-118-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-119-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-120-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-121-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-123-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-122-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-124-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-125-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-126-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-127-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-128-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-129-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-130-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-131-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-132-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-133-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-134-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-135-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-136-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-137-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-138-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-139-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-140-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-141-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-142-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-143-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-144-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-146-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-145-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-147-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-148-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-149-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-150-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-151-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-152-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-153-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-154-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-156-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-155-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-159-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-158-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-160-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-161-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-157-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-162-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-165-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-164-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download
memory/4224-163-0x0000000077110000-0x000000007729E000-memory.dmp

Filesize
1.6MB

Download