Overview
overview
7Static
static
3Stremio+4.4.168.exe
windows11-21h2-x64
QtQuick/Co...in.dll
windows11-21h2-x64
1QtQuick/Co...in.dll
windows11-21h2-x64
1QtQuick/Co...in.dll
windows11-21h2-x64
QtQuick/Co...dar.js
windows11-21h2-x64
QtQuick/Co...Box.js
windows11-21h2-x64
3QtQuick/Co...enu.js
windows11-21h2-x64
3QtQuick/Co...Bar.js
windows11-21h2-x64
3QtQuick/Co...iew.js
windows11-21h2-x64
QtQuick/Co...del.js
windows11-21h2-x64
3QtQuick/Co...ils.js
windows11-21h2-x64
3QtQuick/Co...ent.js
windows11-21h2-x64
3QtQuick/Co...tem.js
windows11-21h2-x64
3QtQuick/Co...nu.vbs
windows11-21h2-x64
1QtQuick/Co...se.vbs
windows11-21h2-x64
1QtQuick/Co...low.js
windows11-21h2-x64
3QtQuick/Co...tem.js
windows11-21h2-x64
3QtQuick/Co...ior.js
windows11-21h2-x64
3QtQuick/Co...Bar.js
windows11-21h2-x64
3QtQuick/Co...Bar.js
windows11-21h2-x64
3QtQuick/Co...ion.js
windows11-21h2-x64
3QtQuick/Co...dle.js
windows11-21h2-x64
3QtQuick/Co...les.js
windows11-21h2-x64
3QtQuick/Co...der.js
windows11-21h2-x64
QtQuick/Co...w.qmlc
windows11-21h2-x64
3QtQuick/Co...ox.qml
windows11-21h2-x64
3QtQuick/Co...w.qmlc
windows11-21h2-x64
3QtQuick/Co...on.qml
windows11-21h2-x64
3QtQuick/Co...le.qml
windows11-21h2-x64
3QtQuick/Co...le.qml
windows11-21h2-x64
3QtQuick/Co...yle.js
windows11-21h2-x64
3QtQuick/Co...yle.js
windows11-21h2-x64
Analysis
-
max time kernel
300s -
max time network
308s -
platform
windows11-21h2_x64 -
resource
win11-20240419-en -
resource tags
arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system -
submitted
24/06/2024, 11:03
Static task
static1
Behavioral task
behavioral1
Sample
Stremio+4.4.168.exe
Resource
win11-20240419-en
Behavioral task
behavioral2
Sample
QtQuick/Controls.2/Fusion/qtquickcontrols2fusionstyleplugin.dll
Resource
win11-20240508-en
Behavioral task
behavioral3
Sample
QtQuick/Controls.2/Imagine/qtquickcontrols2imaginestyleplugin.dll
Resource
win11-20240611-en
Behavioral task
behavioral4
Sample
QtQuick/Controls.2/qtquickcontrols2plugin.dll
Resource
win11-20240611-en
Behavioral task
behavioral5
Sample
QtQuick/Controls/Calendar.js
Resource
win11-20240611-en
Behavioral task
behavioral6
Sample
QtQuick/Controls/ComboBox.js
Resource
win11-20240508-en
Behavioral task
behavioral7
Sample
QtQuick/Controls/Menu.js
Resource
win11-20240508-en
Behavioral task
behavioral8
Sample
QtQuick/Controls/MenuBar.js
Resource
win11-20240419-en
Behavioral task
behavioral9
Sample
QtQuick/Controls/Private/BasicTableView.js
Resource
win11-20240508-en
Behavioral task
behavioral10
Sample
QtQuick/Controls/Private/CalendarHeaderModel.js
Resource
win11-20240508-en
Behavioral task
behavioral11
Sample
QtQuick/Controls/Private/CalendarUtils.js
Resource
win11-20240508-en
Behavioral task
behavioral12
Sample
QtQuick/Controls/Private/ColumnMenuContent.js
Resource
win11-20240611-en
Behavioral task
behavioral13
Sample
QtQuick/Controls/Private/ContentItem.js
Resource
win11-20240611-en
Behavioral task
behavioral14
Sample
QtQuick/Controls/Private/EditMenu.vbs
Resource
win11-20240508-en
Behavioral task
behavioral15
Sample
QtQuick/Controls/Private/EditMenu_base.vbs
Resource
win11-20240611-en
Behavioral task
behavioral16
Sample
QtQuick/Controls/Private/FastGlow.js
Resource
win11-20240419-en
Behavioral task
behavioral17
Sample
QtQuick/Controls/Private/MenuContentItem.js
Resource
win11-20240611-en
Behavioral task
behavioral18
Sample
QtQuick/Controls/Private/ModalPopupBehavior.js
Resource
win11-20240611-en
Behavioral task
behavioral19
Sample
QtQuick/Controls/Private/ScrollBar.js
Resource
win11-20240508-en
Behavioral task
behavioral20
Sample
QtQuick/Controls/Private/TabBar.js
Resource
win11-20240508-en
Behavioral task
behavioral21
Sample
QtQuick/Controls/Private/TableViewSelection.js
Resource
win11-20240508-en
Behavioral task
behavioral22
Sample
QtQuick/Controls/Private/TextHandle.js
Resource
win11-20240611-en
Behavioral task
behavioral23
Sample
QtQuick/Controls/Private/TextInputWithHandles.js
Resource
win11-20240508-en
Behavioral task
behavioral24
Sample
QtQuick/Controls/Private/TreeViewItemDelegateLoader.js
Resource
win11-20240611-en
Behavioral task
behavioral25
Sample
QtQuick/Controls/ScrollView.qmlc
Resource
win11-20240611-en
Behavioral task
behavioral26
Sample
QtQuick/Controls/SpinBox.qml
Resource
win11-20240508-en
Behavioral task
behavioral27
Sample
QtQuick/Controls/StackView.qmlc
Resource
win11-20240611-en
Behavioral task
behavioral28
Sample
QtQuick/Controls/StackViewTransition.qml
Resource
win11-20240419-en
Behavioral task
behavioral29
Sample
QtQuick/Controls/Styles/Base/ApplicationWindowStyle.qml
Resource
win11-20240508-en
Behavioral task
behavioral30
Sample
QtQuick/Controls/Styles/Base/BusyIndicatorStyle.qml
Resource
win11-20240508-en
Behavioral task
behavioral31
Sample
QtQuick/Controls/Styles/Base/CircularButtonStyle.js
Resource
win11-20240508-en
Behavioral task
behavioral32
Sample
QtQuick/Controls/Styles/Base/CircularGaugeStyle.js
Resource
win11-20240611-en
General
-
Target
QtQuick/Controls/StackViewTransition.qml
-
Size
2KB
-
MD5
51d8b8e0d66d80736e6b6a0753babc82
-
SHA1
5bf685996e4df8bdd9362047ebc9fcea7abad68b
-
SHA256
14e65632333ed9fe15d87e138122e76cb942d5e4e0f58776eba26cdb73953e06
-
SHA512
85dff4d5367c4dfe0ca6969c8c0071b9550505fb813aaeaacd432e2b14f99d733962cc7e2f04f4c1c3870870f193eaed6abcf826f3e3b4f1056a82d9163e7f45
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 856 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\QtQuick\Controls\StackViewTransition.qml1⤵
- Modifies registry class
PID:3936
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:856