Analysis
-
max time kernel
106s -
max time network
181s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
15/06/2023, 21:13
General
-
Target
Qt5Widgets.dll
-
Size
8.9MB
-
MD5
63ade1a800a56b7678a0aea330871da8
-
SHA1
b8134ad66bb5e4df430cb1c925c6a0e5289f15dc
-
SHA256
205a1da3cf4aa46949148559fcdba052396a8132979e28c5ef33a5185bcec007
-
SHA512
fcf0959714ef3e59bf27a616bf0c73a05e2fa83eb650aa94b34c769bc2da3635970ed8370853b81c1b2e62ce7e5576e57710a708a225e8f24ec2451fc48f2d77
-
SSDEEP
98304:NlwdQ5ui5a9elu+5noCpVm+OBp8UAjPHZjGMVVkmwargtay3imcUusri+8KNhXsx:NNU+5noCp9lP4McgY7VX0dxb3Ghxy
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Widgets.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Widgets.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4592 -s 7203⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4592 -ip 45921⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152KB
-
Filesize
124KB
-
Filesize
1.9MB
-
Filesize
5.5MB
-
Filesize
7.4MB
-
Filesize
3.1MB
-
Filesize
5.5MB
-
Filesize
7.4MB
-
Filesize
6.4MB
-
Filesize
152KB
-
Filesize
1.9MB
-
Filesize
124KB
-
Filesize
5.5MB
-
Filesize
7.4MB
-
Filesize
264KB
-
Filesize
120KB
-
Filesize
1.0MB
-
Filesize
104KB
-
Filesize
3.1MB
-
Filesize
1.9MB
-
Filesize
692KB
-
Filesize
188KB
-
Filesize
368KB
-
Filesize
1.3MB
-
Filesize
772KB
-
Filesize
84KB
-
Filesize
168KB
-
Filesize
304KB
-
Filesize
168KB
-
Filesize
100KB
-
Filesize
1.0MB
-
Filesize
27.1MB