Analysis
-
max time kernel
135s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
15/06/2023, 21:13
General
-
Target
Qt5Concurrent.dll
-
Size
63KB
-
MD5
8aa12e8d0d9c826cb65d80718b09bce7
-
SHA1
e849955c2022ea7eb49f44088a2ae22738a59cc5
-
SHA256
9c223299b49ff7c86845f4dc4c661756e632a235b2a3e31320dbf3c7f3629837
-
SHA512
77e0fd367b9852c5a3b831496335add06610ff98d49da1566b0d7c46732d59df8ac34177dce87851ea8c7e7f90419f646de027deaaaf4ffa35980de1319568ea
-
SSDEEP
1536:A8tfXz3rJaOHYEU8ZrN1m2WzAQNo4b/Nqm:7tfDrJ3a8ZmfAQNo4b/Nqm
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Concurrent.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Concurrent.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4832 -s 5483⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4832 -ip 48321⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.1MB
-
Filesize
68KB
-
Filesize
152KB
-
Filesize
124KB
-
Filesize
1.9MB
-
Filesize
5.5MB
-
Filesize
104KB
-
Filesize
3.1MB
-
Filesize
1.9MB
-
Filesize
692KB
-
Filesize
120KB
-
Filesize
368KB
-
Filesize
27.1MB