Analysis
-
max time kernel
91s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
15-06-2023 21:13
General
-
Target
Qt5Gui.dll
-
Size
9.5MB
-
MD5
b4b299f249526a01ba6d1a0f5fcbf1ed
-
SHA1
7099f945d990f9715bd4e595b38b825a168d4869
-
SHA256
bcc0d1abd78d76934cd56099ffe25bfdc3a2f9fa7600a77d81f4bae2aa4232c3
-
SHA512
60980c69cc1d1ecd0e111bd20b32daf19ca4afed47a4eb96acf7b4eed7252ca08e8212e191e6645b805556bcf26183b04db2dd39e3cfb755518df10b75caea6d
-
SSDEEP
98304:L3PGzuFSAihmBMCLAy1Txa7jcHDLdj+QV5Gr/HEdO8QkONRPQxwaWkogc:L3NKhszsyxs7jipasdQkOcQ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Gui.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Gui.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4496 -s 7123⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4496 -ip 44961⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.5MB
-
Filesize
3.1MB
-
Filesize
5.5MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
152KB
-
Filesize
124KB
-
Filesize
1.0MB
-
Filesize
264KB
-
Filesize
1.9MB
-
Filesize
120KB
-
Filesize
772KB
-
Filesize
188KB
-
Filesize
84KB
-
Filesize
100KB
-
Filesize
1.3MB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
1.0MB
-
Filesize
304KB
-
Filesize
5.5MB
-
Filesize
104KB
-
Filesize
692KB
-
Filesize
368KB
-
Filesize
3.1MB
-
Filesize
1.9MB
-
Filesize
27.1MB