Analysis
-
max time kernel
151s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
15-06-2023 21:13
General
-
Target
Qt5Svg.dll
-
Size
580KB
-
MD5
8387e8d6c857ceda5a45bec2f9dfa4fa
-
SHA1
4c148d4ae37849e5a2364c12b312d6d292747dea
-
SHA256
6499cff202b7c57cbb560085798f276db69a46f67e43bb4714f15ec71d3fbad5
-
SHA512
0d3d012176338e12e3210761510ea7b89a09b9d38e293ff41c3e86e844566cbdfbc5d2df5e75dca5a90ed06f2c9fc8a4bf77945801a09f24b20387dd2686f189
-
SSDEEP
6144:Sx7ZCgwM+z6HsHLEEg0Aax6n4lNLHZH3suV5IJDzglMvlJM4aiy6AI98cS5gFZqT:SxlCgwM+OM4Egsr989lA6A3z
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Svg.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Svg.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4764 -s 7203⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4764 -ip 47641⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.4MB
-
Filesize
6.4MB
-
Filesize
188KB
-
Filesize
3.1MB
-
Filesize
188KB
-
Filesize
7.4MB
-
Filesize
6.4MB
-
Filesize
372KB
-
Filesize
152KB
-
Filesize
5.5MB
-
Filesize
120KB
-
Filesize
1.9MB
-
Filesize
104KB
-
Filesize
124KB
-
Filesize
1.9MB
-
Filesize
368KB
-
Filesize
692KB
-
Filesize
3.1MB
-
Filesize
27.1MB
-
Filesize
7.4MB
-
Filesize
6.4MB
-
Filesize
772KB
-
Filesize
1.0MB
-
Filesize
264KB
-
Filesize
84KB
-
Filesize
100KB
-
Filesize
168KB
-
Filesize
1.3MB
-
Filesize
304KB
-
Filesize
168KB
-
Filesize
1.0MB
-
Filesize
188KB