Analysis
-
max time kernel
447s -
max time network
456s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
14-03-2024 18:34
General
-
Target
Qt6QmlCore.dll
-
Size
143KB
-
MD5
866b9554bfb48cc945c7ab28d3b99edb
-
SHA1
df7faf8dabe44f144dd7235ae813bf3832e49d55
-
SHA256
1753ac247df706d70988cfb786dd55cbe283574e262f8d306da535cd21a08ad0
-
SHA512
540171e35f2d265df5bdcff471cac98658b31b07b277dad25aa265eb2258c0e8fdeef5d9f1846162da7205751cda5a0d54b706b565397b4cca2da2637707e7c1
-
SSDEEP
3072:fglM8L4RRP3I0VWtCv/obT/I4FHyR1LJ5a31DO2mlLBwIoI2:fuW5BAbT/I4FHO1LJ5I1DO2mlLBwIoI2
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt6QmlCore.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5a1bb9816110cc5c8abee69fa6545e0d8
SHA1917abb94b116926df35ead43378015e006c98747
SHA25666320d46d59091f7172b381a4aca10e3168866bf87431f0ca5165355d970596d
SHA51223af8a07c7e5415ed7d1f6ab3f8a1fcb38de44130f8746b3755edf93034c6db668ba224dee8db0efdf1380e5262fc84cf8a213558257362f207ec695ae80b94b
-
Filesize
1.8MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB