3abb6bd65505ba04a5b9c002705a250b293e5c2930baac1b1f1f3bea530ebe9b | Triage

Analysis

max time kernel
133s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230220-es
resource tags

arch:x64arch:x86image:win10v2004-20230220-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
14/05/2023, 18:59

Sharing

Report Analysis Logs

General

Target

Qt6Xml.dll
Size

133KB
MD5

5fceb2eaac6f25a75108a7a9ce8b57b6
SHA1

a31fec965e023b73764e2fce92ad9093ed6f7d65
SHA256

2d623a1fb8901ecc24107be17636c76f41607192b411b4e57bcdbae6ca515a1a
SHA512

49bc1c81a8e634c51d4303c6d28bab774391e74ce96af51e7a14b06767ff0d40594cdd7f72e01c1025b80dba1b28597fef53c6d80fea2c434ef636db2a57d161
SSDEEP

3072:HhSRIxl6SXFwlPNwwJzM3QK1eBfsU2KyEw:HhSRIxoSepNJffs+yEw

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4300	1196	WerFault.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt6Xml.dll,#1
1⤵
PID:1196
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1196 -s 504
  2⤵
  - Program crash
  PID:4300

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 184 -p 1196 -ip 1196
1⤵
PID:1436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads