Analysis
-
max time kernel
141s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
09/01/2024, 02:46
General
-
Target
UltimMC/Qt5Svg.dll
-
Size
349KB
-
MD5
96934c8f93716fb4c5ab7433c3fcf660
-
SHA1
e411016b245b77813f8ea5ed9dc8dcf9403ac831
-
SHA256
adb44de5a537f5fadb9288e3852189f799ba7b95cef847f2198a8864ab6f063b
-
SHA512
bcd231289cf4900886a4a5c55c0584073da36d5dd823ebf6a59986932fdb1cf70ead079fcdc7e9cfd4837e6212eb7037a7b5b7b0704e073b06c6fc4f5dbbc97d
-
SSDEEP
6144:GCJ8N/2aVIOLZS5Qyk2MIwe8x1TB3JJ+Wd5J/LCW2V:GCJQ2arZS2yAG8x1TRjDL
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\UltimMC\Qt5Svg.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\UltimMC\Qt5Svg.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4576 -s 6763⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 4576 -ip 45761⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.5MB
-
Filesize
144KB
-
Filesize
5.2MB
-
Filesize
80KB
-
Filesize
6.3MB
-
Filesize
5.2MB
-
Filesize
6.3MB
-
Filesize
5.5MB
-
Filesize
6.3MB
-
Filesize
380KB
-
Filesize
144KB
-
Filesize
1.0MB
-
Filesize
5.2MB
-
Filesize
80KB