Analysis

  • max time kernel
    119s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01-04-2024 17:02

General

  • Target

    Qt5Network.dll

  • Size

    1.0MB

  • MD5

    5a0ee855ef5d4cdc12033773ed864604

  • SHA1

    1589ada7f2747983c6d1232b1454e86b571f2b79

  • SHA256

    b1f69db86ae070d41e97eae8b22ff75df694de557476da2b9131e4302353a93d

  • SHA512

    2b6e0ce608aa0a1f69a89ad3640fcbf2424a060d9b663f66b786b2738d8d0d19b1ec51525c99558a08aae7c1e539d6137a024b11cc5a0733c0b594012f21616b

  • SSDEEP

    24576:lC5YeO/NeO1vE82AksRVtoQnvpDjaIFjSQj3QkwG2:aYeO/Hh3vlbSK3QD

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Network.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2224
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Network.dll,#1
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2908
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2908 -s 268
        3⤵
        • Program crash
        PID:2820

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads