Overview

overview

9

Static

static

3

Wireshark-...64.exe

windows7-x64

4

Wireshark-...64.exe

windows10-2004-x64

9

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

dumpcap.exe

windows7-x64

1

dumpcap.exe

windows10-2004-x64

1

dumpcap.html

windows7-x64

1

dumpcap.html

windows10-2004-x64

1

extcap.html

windows7-x64

1

extcap.html

windows10-2004-x64

1

generic/qt...in.dll

windows7-x64

1

generic/qt...in.dll

windows10-2004-x64

1

glib-2.0-0.dll

windows7-x64

1

glib-2.0-0.dll

windows10-2004-x64

1

gmodule-2.0-0.dll

windows7-x64

1

gmodule-2.0-0.dll

windows10-2004-x64

1

gthread-2.0-0.dll

windows7-x64

1

gthread-2.0-0.dll

windows10-2004-x64

1

iconengine...on.dll

windows7-x64

1

iconengine...on.dll

windows10-2004-x64

1

iconv-2.dll

windows7-x64

1

iconv-2.dll

windows10-2004-x64

1

imageformats/qgif.dll

windows7-x64

1

imageformats/qgif.dll

windows10-2004-x64

1

imageformats/qico.dll

windows7-x64

1

imageformats/qico.dll

windows10-2004-x64

1

imageforma...eg.dll

windows7-x64

1

imageforma...eg.dll

windows10-2004-x64

1

imageformats/qsvg.dll

windows7-x64

1

imageformats/qsvg.dll

windows10-2004-x64

1

intl-8.dll

windows7-x64

1

intl-8.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    147s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2024, 09:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    imageformats/qico.dll

  • Size

    45KB

  • MD5

    a83bcfc80744013aa1ff36456b76ee2a

  • SHA1

    8cf5f120510d4eb7c448660950145cafc7f70c40

  • SHA256

    dbee8a2b275408883806a67b0570ede0abf951c8ffe4528084b2870e30c72f2c

  • SHA512

    a19be31520eb0350b211e33f3785fb628d1abbc77ee54fc0e3a5f1268071bd4c6649d290085f821c4758bd35edb5cb9602750322484497357f0a90d01b8b4fcc

  • SSDEEP

    768:zNh/rHNzM5yECWkF0EuXc19QAo3E3xv2gxOGAMxkEc5:xpS5fCVFBuXc19QAoU3xv2g00xw5

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\imageformats\qico.dll,#1
    1⤵
      PID:1292

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads