Analysis
- max time kernel
140s - max time network
122s - platform
windows7_x64 - resource
win7-20240220-en - resource tags
- submitted
13/06/2024, 01:29
General
- Target suyu-windows-mingw-20240410-0de49070e4_/Qt5Gui.dll
- Size 9.0MB
- Sample240613-bwl2msyhmb
- SHA256 03efb04ea8a93c91c426148e849b73c6918be67b3486fce057f3828c3eaf2ab4
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\suyu-windows-mingw-20240410-0de49070e4_\Qt5Gui.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1700 -s 2522⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1700-0-0x000007FEF4C00000-0x000007FEF5509000-memory.dmp
memory/1700-1-0x000007FEF4C00000-0x000007FEF5509000-memory.dmp
memory/1700-9-0x000007FEF7C10000-0x000007FEF7C36000-memory.dmp
memory/1700-8-0x000007FEF55A0000-0x000007FEF57C4000-memory.dmp
memory/1700-10-0x000007FEF4AE0000-0x000007FEF4C00000-memory.dmp
memory/1700-14-0x000007FEF7BF0000-0x000007FEF7C07000-memory.dmp
memory/1700-16-0x000007FEF4830000-0x000007FEF4993000-memory.dmp
memory/1700-20-0x000007FEF4520000-0x000007FEF4560000-memory.dmp
memory/1700-19-0x0000000070540000-0x000000007056F000-memory.dmp
memory/1700-18-0x000007FEF4780000-0x000007FEF4822000-memory.dmp
memory/1700-17-0x000007FEF5560000-0x000007FEF5599000-memory.dmp
memory/1700-15-0x000007FEF61B0000-0x000007FEF61DD000-memory.dmp
memory/1700-13-0x0000000069CC0000-0x0000000069CDC000-memory.dmp
memory/1700-11-0x000007FEF49A0000-0x000007FEF4ADB000-memory.dmp
memory/1700-7-0x000007FEF6DC0000-0x000007FEF6E54000-memory.dmp
memory/1700-6-0x000007FEF7C40000-0x000007FEF7C4E000-memory.dmp
memory/1700-5-0x000007FEF6E60000-0x000007FEF6F58000-memory.dmp
memory/1700-4-0x000007FEFB020000-0x000007FEFB037000-memory.dmp
memory/1700-3-0x000007FEFA410000-0x000007FEFA435000-memory.dmp
memory/1700-2-0x000007FEF57D0000-0x000007FEF5E1E000-memory.dmp
memory/1700-12-0x000007FEF61E0000-0x000007FEF629F000-memory.dmp