3abb6bd65505ba04a5b9c002705a250b293e5c2930baac1b1f1f3bea530ebe9b | Triage

Analysis

max time kernel
134s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230221-es
resource tags

arch:x64arch:x86image:win10v2004-20230221-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
14/05/2023, 18:59

Sharing

Report Analysis Logs

General

Target

Qt6Core.dll
Size

5.4MB
MD5

f153f00ed37064b392bb36dff59e67d8
SHA1

a6ca85c8fdfad202d2148cd046d56020b780820f
SHA256

eaf9f64363f25524deda5e12bb0b5efcdc2477611c8b936507486bfb4627f373
SHA512

a7d09e1790e9d9a0971d6056be7efa8c574107fd5bde7e08732138605c0c8aa15c8cf68b67a3320a9fbfe5e5965d22b2858e36d8aeef0a9a2efb4dfe1f5981fa
SSDEEP

98304:6GMnay2Bove1lFwEKFdu9CwJsv6tbgk/39Vx:6Aeve1v9KFdu9CwJsv6tbgk/39z

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3360	2192	WerFault.exe	61

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt6Core.dll,#1
1⤵
PID:2192
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2192 -s 504
  2⤵
  - Program crash
  PID:3360

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 376 -p 2192 -ip 2192
1⤵
PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads