e4abf9c3a8be583b4c7085f13c556c099ea8480f68f8c4596bd286ddca3f79af | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
14/06/2024, 03:09

Sharing

Report Analysis Logs

General

Target

bin/QtCore4.dll
Size

1004KB
MD5

96213755b33c017492437ca934987207
SHA1

8e6f7c5d3ae9a0ea783e8ecb6bb69f827b903932
SHA256

2bb0d6fff88427e34c7d0d29e97443fe9826c42ce2aa0269f024b23d9e9ea22a
SHA512

dad2bff4d673efc34ceac3c4fcb3f67eb922302e67658e3ee9d6cd17ca31b8785b4745840f2f1030106b5184cd12140b3e7872a3e91d16e657e9ecbb3de8517a
SSDEEP

24576:eNeIBNL823deUvLNJngNphsq7OdyVgTsiovRMSN:AeIlHb4pPihTvoi

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1932	2564	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 3004 wrote to memory of 2564	3004	rundll32.exe	28
PID 3004 wrote to memory of 2564	3004	rundll32.exe	28
PID 3004 wrote to memory of 2564	3004	rundll32.exe	28
PID 3004 wrote to memory of 2564	3004	rundll32.exe	28
PID 3004 wrote to memory of 2564	3004	rundll32.exe	28
PID 3004 wrote to memory of 2564	3004	rundll32.exe	28
PID 3004 wrote to memory of 2564	3004	rundll32.exe	28
PID 2564 wrote to memory of 1932	2564	rundll32.exe	29
PID 2564 wrote to memory of 1932	2564	rundll32.exe	29
PID 2564 wrote to memory of 1932	2564	rundll32.exe	29
PID 2564 wrote to memory of 1932	2564	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\QtCore4.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3004
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\QtCore4.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2564
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2564 -s 232
    3⤵
    - Program crash
    PID:1932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads