Analysis

  • max time kernel
    598s
  • max time network
    608s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/03/2024, 18:34

General

  • Target

    Qt6Gui.dll

  • Size

    8.5MB

  • MD5

    582c26e1b28d735e5024120d544137ff

  • SHA1

    e9773b32d29504ba5d8d1045e751046100e7ab55

  • SHA256

    c2b16fe376ac314fb62d476707e93a1345b2edb65f95274f407b402d53a8aa58

  • SHA512

    ed9d4ad14d1bfa6dbc88dc4a8d72cb4b8eaae6b150e091ff30bb60a7bb627b506794511645ca3e646e3ee95804ed2681aa799916819a8ac8ade5f41942af058e

  • SSDEEP

    98304:AYSi5NAvUYzjcdwT4gE1OqQ+wiGf+IPwpve5iWWNZ/Cysd0gVSk:cWVJ3e+ws8R

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt6Gui.dll,#1
    1⤵
      PID:4240
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4448 --field-trial-handle=2900,i,14549994492153927475,12895178890800740987,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:1652
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4116 --field-trial-handle=2900,i,14549994492153927475,12895178890800740987,262144 --variations-seed-version /prefetch:8
        1⤵
          PID:3480

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4240-0-0x00007FFE882F0000-0x00007FFE884B6000-memory.dmp

          Filesize

          1.8MB