Analysis
-
max time kernel
314s -
max time network
318s -
platform
windows10-1703_x64 -
resource
win10-20220812-es -
resource tags
-
submitted
09-01-2023 00:46
General
-
Target
UltimMC/Qt5Core.dll
-
Size
5.1MB
-
MD5
db2f4ec716747a5ddecb146cfd124a90
-
SHA1
dcc4e2efa1af32ed55c3b1d004eff6eaa2b6a02b
-
SHA256
ffed386cbbe2363331632d9f12be8eb00cf654d95b4c2b0d287da57e93813f80
-
SHA512
5db0356ff3dc3ef28e6a46dedb212c87ab791a61b8de682d0dbf22dda6630ca795e8aa89d4b8226f876440e47d5584e66dbeda481d8499c9f24f79506cf04005
-
SSDEEP
98304:paO5O7s0XerbbAJIaKSA31cCvErDsNYWZSgkvDFIJsv6tWKFdu9CQlld0:BOoZX8O1cBdUSg8DiJsv6tWKFdu9CQZ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\UltimMC\Qt5Core.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\UltimMC\Qt5Core.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2584 -s 6843⤵
- Program crash
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
5.2MB