Overview
overview
10Static
static
3Launcher!_x32_x64.exe
windows7-x64
1Launcher!_x32_x64.exe
windows10-2004-x64
10dll/Qt5Gui.dll
windows7-x64
1dll/Qt5Gui.dll
windows10-2004-x64
1dll/Qt5Widgets.dll
windows7-x64
1dll/Qt5Widgets.dll
windows10-2004-x64
1dll/directX.dll
windows7-x64
1dll/directX.dll
windows10-2004-x64
1dll/msssvcr120.dll
windows7-x64
3dll/msssvcr120.dll
windows10-2004-x64
3dll/suppID.dll
windows7-x64
1dll/suppID.dll
windows10-2004-x64
1Analysis
-
max time kernel
118s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25-05-2024 23:41
Static task
static1
Behavioral task
behavioral1
Sample
Launcher!_x32_x64.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Launcher!_x32_x64.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
dll/Qt5Gui.dll
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
dll/Qt5Gui.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
dll/Qt5Widgets.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
dll/Qt5Widgets.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
dll/directX.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
dll/directX.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
dll/msssvcr120.dll
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
dll/msssvcr120.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
dll/suppID.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
dll/suppID.dll
Resource
win10v2004-20240508-en
General
-
Target
dll/Qt5Widgets.dll
-
Size
4.3MB
-
MD5
f697ffc85fb86d72654c4f5ba4e1bdc2
-
SHA1
670657f598d408ab232dec75be6fc7983bc5ce4b
-
SHA256
400fa69aa8803f6c3a6f9a5fc956475d0396095c4b6d4665b7aa29bbcb8e3640
-
SHA512
47513892c22a193c51ecf09c8f3e4c4271a92be33b7b7d535290ea75a1498c5531881a26a85dbf758361e6892abf12a796f1c5c284a34f1d173d61d2012325b7
-
SSDEEP
49152:Zhk8cs4FhK1FKBxR8Lcdm0OTqZ7uA/GrXHIaTU+cDZ0V37SUJ:7k8ymoBxKAdmL8yONaQi32UJ
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes:
rundll32.exedescription pid process target process PID 2116 wrote to memory of 640 2116 rundll32.exe rundll32.exe PID 2116 wrote to memory of 640 2116 rundll32.exe rundll32.exe PID 2116 wrote to memory of 640 2116 rundll32.exe rundll32.exe PID 2116 wrote to memory of 640 2116 rundll32.exe rundll32.exe PID 2116 wrote to memory of 640 2116 rundll32.exe rundll32.exe PID 2116 wrote to memory of 640 2116 rundll32.exe rundll32.exe PID 2116 wrote to memory of 640 2116 rundll32.exe rundll32.exe