Analysis
- max time kernel
142s - max time network
128s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
- submitted
23/02/2024, 14:44
General
- Target Lunar Client Qt/Qt5Gui.dll
- Size 9.2MB
- Sample240223-r36mmabc53
- SHA256 8bcf807aaf2419843a778994187fa4a2fe9e2d926435ed8add3e670935b3f9aa
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Lunar Client Qt\Qt5Gui.dll",#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2812 -s 2282⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2812-0-0x0000000061940000-0x0000000062012000-memory.dmp
memory/2812-1-0x0000000061940000-0x0000000062012000-memory.dmp
memory/2812-2-0x000007FEF7510000-0x000007FEF7532000-memory.dmp
memory/2812-3-0x000007FEFB220000-0x000007FEFB236000-memory.dmp
memory/2812-4-0x000007FEF5BC0000-0x000007FEF5DB3000-memory.dmp
memory/2812-5-0x0000000068880000-0x0000000068EB9000-memory.dmp