Overview

overview

10

Static

static

3

ForceCPU.exe

windows7-x64

1

ForceCPU.exe

windows10-2004-x64

1

HTCTL32.dll

windows7-x64

1

HTCTL32.dll

windows10-2004-x64

3

PCICHEK.dll

windows7-x64

1

PCICHEK.dll

windows10-2004-x64

1

PCICL32.dll

windows7-x64

1

PCICL32.dll

windows10-2004-x64

1

QWhale.Common.dll

windows7-x64

1

QWhale.Common.dll

windows10-2004-x64

1

QWhale.Editor.dll

windows7-x64

1

QWhale.Editor.dll

windows10-2004-x64

1

QWhale.Syntax.dll

windows7-x64

1

QWhale.Syntax.dll

windows10-2004-x64

1

SampleRules.js

windows7-x64

1

SampleRules.js

windows10-2004-x64

1

SimpleFilter.dll

windows7-x64

1

SimpleFilter.dll

windows10-2004-x64

1

TCCTL32.dll

windows7-x64

1

TCCTL32.dll

windows10-2004-x64

1

Timeline.dll

windows7-x64

1

Timeline.dll

windows10-2004-x64

1

api-ms-win...-0.dll

windows10-2004-x64

1

api-ms-win...-0.dll

windows10-2004-x64

1

api-ms-win...-0.dll

windows10-2004-x64

1

api-ms-win...-0.dll

windows10-2004-x64

1

audio/SampleRules.js

windows7-x64

1

audio/SampleRules.js

windows10-2004-x64

1

client33.exe

windows7-x64

10

client33.exe

windows10-2004-x64

10

libEGL.dll

windows7-x64

1

libEGL.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    09-04-2024 18:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Timeline.dll

  • Size

    51KB

  • MD5

    ec476c3ee3f7d463fc8b71a8da42e103

  • SHA1

    a32e85e618a4451feefed350f7fdb88dc662833d

  • SHA256

    25e20d696fa2d40cab80d6e45e998f63ef17564b4bacd978d98dbf4492be93ee

  • SHA512

    ec3c77cb84667aea1330dbeb9e5756a37f55570e4edc1bdde9c873e9218cfed6da2c0df57f4f3f9c2864cb664d1eb55700c95a1555d4bc5d485f0fc028c02c3b

  • SSDEEP

    768:BE8uqoL19VqLPLyYhH9L52OBRz6e4NPTijqhRR2fTMR2fT8BN266bC:YVqLPLyYhFcGzyijLx26O

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Timeline.dll,#1
    1⤵
      PID:2132

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads