Overview
overview
10Static
static
3InstaIler.exe
windows10-1703-x64
10amsvcp120.dll
windows10-1703-x64
3dll/libEGL.dll
windows10-1703-x64
1dll/ssleay32.dll
windows10-1703-x64
1files/libs...re.dll
windows10-1703-x64
3files/libs/libEGL.dll
windows10-1703-x64
1files/libs...32.dll
windows10-1703-x64
1files/libs...20.dll
windows10-1703-x64
3files/libs...20.dll
windows10-1703-x64
3files/libs...sw.dll
windows10-1703-x64
1files/libs...32.dll
windows10-1703-x64
1files/libs...it.dll
windows10-1703-x64
1files/libs/wsepno.dll
windows10-1703-x64
1files/libs/wshbth.dll
windows10-1703-x64
1files/libs/wshcon.dll
windows10-1703-x64
7Analysis
-
max time kernel
128s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
25/04/2024, 16:27
Static task
static1
Behavioral task
behavioral1
Sample
InstaIler.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
amsvcp120.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
dll/libEGL.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
dll/ssleay32.dll
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
files/libs/Qt5Core.dll
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
files/libs/libEGL.dll
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
files/libs/libeay32.dll
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
files/libs/msvcp120.dll
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
files/libs/msvcr120.dll
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
files/libs/opengl32sw.dll
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
files/libs/ssleay32.dll
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
files/libs/wsecedit.dll
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
files/libs/wsepno.dll
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
files/libs/wshbth.dll
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
files/libs/wshcon.dll
Resource
win10-20240404-en
General
-
Target
files/libs/Qt5Core.dll
-
Size
4.5MB
-
MD5
b4f2c1be9ac448fdbb6833b0fba3bb75
-
SHA1
e34496261619f6dc70efd08b0f3c9c73b3dfee50
-
SHA256
7ab15d298cdd7185f2cceae2613715c54a54861fa788bb2de3d152eceb484288
-
SHA512
be478f77214590ffe6360ee4b9e3c20e45d5281973cfbd502674dbdfb5afe62ec9b0ae06418f4523dd73fa4573d92c52100cf5c3b730ae1bc8ff3f34d8e1860f
-
SSDEEP
98304:0dS/SBS/PayG3fVkp9PJsv6tWKFdu9CPDB:/wfVUPJsv6tWKFdu9CPN
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4388 4536 WerFault.exe 74 -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 224 wrote to memory of 4536 224 rundll32.exe 74 PID 224 wrote to memory of 4536 224 rundll32.exe 74 PID 224 wrote to memory of 4536 224 rundll32.exe 74
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\files\libs\Qt5Core.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:224 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\files\libs\Qt5Core.dll,#12⤵PID:4536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4536 -s 6483⤵
- Program crash
PID:4388
-
-