Overview

overview

9

Static

static

3

Wireshark-...64.exe

windows7-x64

4

Wireshark-...64.exe

windows10-2004-x64

9

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

dumpcap.exe

windows7-x64

1

dumpcap.exe

windows10-2004-x64

1

dumpcap.html

windows7-x64

1

dumpcap.html

windows10-2004-x64

1

extcap.html

windows7-x64

1

extcap.html

windows10-2004-x64

1

generic/qt...in.dll

windows7-x64

1

generic/qt...in.dll

windows10-2004-x64

1

glib-2.0-0.dll

windows7-x64

1

glib-2.0-0.dll

windows10-2004-x64

1

gmodule-2.0-0.dll

windows7-x64

1

gmodule-2.0-0.dll

windows10-2004-x64

1

gthread-2.0-0.dll

windows7-x64

1

gthread-2.0-0.dll

windows10-2004-x64

1

iconengine...on.dll

windows7-x64

1

iconengine...on.dll

windows10-2004-x64

1

iconv-2.dll

windows7-x64

1

iconv-2.dll

windows10-2004-x64

1

imageformats/qgif.dll

windows7-x64

1

imageformats/qgif.dll

windows10-2004-x64

1

imageformats/qico.dll

windows7-x64

1

imageformats/qico.dll

windows10-2004-x64

1

imageforma...eg.dll

windows7-x64

1

imageforma...eg.dll

windows10-2004-x64

1

imageformats/qsvg.dll

windows7-x64

1

imageformats/qsvg.dll

windows10-2004-x64

1

intl-8.dll

windows7-x64

1

intl-8.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24-05-2024 09:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    imageformats/qjpeg.dll

  • Size

    604KB

  • MD5

    28639ddce20b71142eb8306305922c5b

  • SHA1

    af2daf88ba940336c4592ad37be9755812f5ade6

  • SHA256

    88ff62366bd60c749124a633aa10013d9c5f4bd7bb3c23a6a2ecbfa2dadbc724

  • SHA512

    5afbbd969008aa9ed3fc61fe648dea6e91ef9d36eaffdd6c6f0d77a35320a4723f91f784e81a5e3918e4118a3a76d67ee3a7a1c4fd1114ef3d52d06b86a860c0

  • SSDEEP

    6144:PkY20xwNvMjZM09UGzjdr9N2F6iXSh6eKUm5QSNu3a99XHBHR+29zHn8cCl4RVDw:PINvMtgXMKUvSC2eM8HvTl

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\imageformats\qjpeg.dll,#1
    1⤵
      PID:2304

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads