Overview
overview
7Static
static
3Stremio+4.4.168.exe
windows11-21h2-x64
QtQuick/Co...in.dll
windows11-21h2-x64
1QtQuick/Co...in.dll
windows11-21h2-x64
1QtQuick/Co...in.dll
windows11-21h2-x64
QtQuick/Co...dar.js
windows11-21h2-x64
QtQuick/Co...Box.js
windows11-21h2-x64
3QtQuick/Co...enu.js
windows11-21h2-x64
3QtQuick/Co...Bar.js
windows11-21h2-x64
3QtQuick/Co...iew.js
windows11-21h2-x64
QtQuick/Co...del.js
windows11-21h2-x64
3QtQuick/Co...ils.js
windows11-21h2-x64
3QtQuick/Co...ent.js
windows11-21h2-x64
3QtQuick/Co...tem.js
windows11-21h2-x64
3QtQuick/Co...nu.vbs
windows11-21h2-x64
1QtQuick/Co...se.vbs
windows11-21h2-x64
1QtQuick/Co...low.js
windows11-21h2-x64
3QtQuick/Co...tem.js
windows11-21h2-x64
3QtQuick/Co...ior.js
windows11-21h2-x64
3QtQuick/Co...Bar.js
windows11-21h2-x64
3QtQuick/Co...Bar.js
windows11-21h2-x64
3QtQuick/Co...ion.js
windows11-21h2-x64
3QtQuick/Co...dle.js
windows11-21h2-x64
3QtQuick/Co...les.js
windows11-21h2-x64
3QtQuick/Co...der.js
windows11-21h2-x64
QtQuick/Co...w.qmlc
windows11-21h2-x64
3QtQuick/Co...ox.qml
windows11-21h2-x64
3QtQuick/Co...w.qmlc
windows11-21h2-x64
3QtQuick/Co...on.qml
windows11-21h2-x64
3QtQuick/Co...le.qml
windows11-21h2-x64
3QtQuick/Co...le.qml
windows11-21h2-x64
3QtQuick/Co...yle.js
windows11-21h2-x64
3QtQuick/Co...yle.js
windows11-21h2-x64
Analysis
-
max time kernel
233s -
max time network
244s -
platform
windows11-21h2_x64 -
resource
win11-20240508-en -
resource tags
arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system -
submitted
24-06-2024 11:03
Static task
static1
Behavioral task
behavioral1
Sample
Stremio+4.4.168.exe
Resource
win11-20240419-en
Behavioral task
behavioral2
Sample
QtQuick/Controls.2/Fusion/qtquickcontrols2fusionstyleplugin.dll
Resource
win11-20240508-en
Behavioral task
behavioral3
Sample
QtQuick/Controls.2/Imagine/qtquickcontrols2imaginestyleplugin.dll
Resource
win11-20240611-en
Behavioral task
behavioral4
Sample
QtQuick/Controls.2/qtquickcontrols2plugin.dll
Resource
win11-20240611-en
Behavioral task
behavioral5
Sample
QtQuick/Controls/Calendar.js
Resource
win11-20240611-en
Behavioral task
behavioral6
Sample
QtQuick/Controls/ComboBox.js
Resource
win11-20240508-en
Behavioral task
behavioral7
Sample
QtQuick/Controls/Menu.js
Resource
win11-20240508-en
Behavioral task
behavioral8
Sample
QtQuick/Controls/MenuBar.js
Resource
win11-20240419-en
Behavioral task
behavioral9
Sample
QtQuick/Controls/Private/BasicTableView.js
Resource
win11-20240508-en
Behavioral task
behavioral10
Sample
QtQuick/Controls/Private/CalendarHeaderModel.js
Resource
win11-20240508-en
Behavioral task
behavioral11
Sample
QtQuick/Controls/Private/CalendarUtils.js
Resource
win11-20240508-en
Behavioral task
behavioral12
Sample
QtQuick/Controls/Private/ColumnMenuContent.js
Resource
win11-20240611-en
Behavioral task
behavioral13
Sample
QtQuick/Controls/Private/ContentItem.js
Resource
win11-20240611-en
Behavioral task
behavioral14
Sample
QtQuick/Controls/Private/EditMenu.vbs
Resource
win11-20240508-en
Behavioral task
behavioral15
Sample
QtQuick/Controls/Private/EditMenu_base.vbs
Resource
win11-20240611-en
Behavioral task
behavioral16
Sample
QtQuick/Controls/Private/FastGlow.js
Resource
win11-20240419-en
Behavioral task
behavioral17
Sample
QtQuick/Controls/Private/MenuContentItem.js
Resource
win11-20240611-en
Behavioral task
behavioral18
Sample
QtQuick/Controls/Private/ModalPopupBehavior.js
Resource
win11-20240611-en
Behavioral task
behavioral19
Sample
QtQuick/Controls/Private/ScrollBar.js
Resource
win11-20240508-en
Behavioral task
behavioral20
Sample
QtQuick/Controls/Private/TabBar.js
Resource
win11-20240508-en
Behavioral task
behavioral21
Sample
QtQuick/Controls/Private/TableViewSelection.js
Resource
win11-20240508-en
Behavioral task
behavioral22
Sample
QtQuick/Controls/Private/TextHandle.js
Resource
win11-20240611-en
Behavioral task
behavioral23
Sample
QtQuick/Controls/Private/TextInputWithHandles.js
Resource
win11-20240508-en
Behavioral task
behavioral24
Sample
QtQuick/Controls/Private/TreeViewItemDelegateLoader.js
Resource
win11-20240611-en
Behavioral task
behavioral25
Sample
QtQuick/Controls/ScrollView.qmlc
Resource
win11-20240611-en
Behavioral task
behavioral26
Sample
QtQuick/Controls/SpinBox.qml
Resource
win11-20240508-en
Behavioral task
behavioral27
Sample
QtQuick/Controls/StackView.qmlc
Resource
win11-20240611-en
Behavioral task
behavioral28
Sample
QtQuick/Controls/StackViewTransition.qml
Resource
win11-20240419-en
Behavioral task
behavioral29
Sample
QtQuick/Controls/Styles/Base/ApplicationWindowStyle.qml
Resource
win11-20240508-en
Behavioral task
behavioral30
Sample
QtQuick/Controls/Styles/Base/BusyIndicatorStyle.qml
Resource
win11-20240508-en
Behavioral task
behavioral31
Sample
QtQuick/Controls/Styles/Base/CircularButtonStyle.js
Resource
win11-20240508-en
Behavioral task
behavioral32
Sample
QtQuick/Controls/Styles/Base/CircularGaugeStyle.js
Resource
win11-20240611-en
General
-
Target
QtQuick/Controls/Styles/Base/ApplicationWindowStyle.qml
-
Size
5KB
-
MD5
de60da37658b3737154c69d264f2a414
-
SHA1
a3e96470b5f9f179f7086009e6eac4f0dbd15bb0
-
SHA256
5a667da03b77d4ef01d9a9bf9dca168645e102b1147678741892b8e785ea6c54
-
SHA512
5c5c807f5800e29a8ddd9be4c29c852da1dcab0fa313c107444f15a0b25927a622ccd952646d3d08230ecd699888fae5afe4146abb4fa4ed3c811661775ef099
-
SSDEEP
96:KogUldGcQWCS3sdszCOf/6VtUjMlljMaH0vJ5jMaH0vGVjMaH0vA:KtcGRS3sdsGx6j6jP07jP0uVjP0I
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2457560273-69882387-977367775-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2457560273-69882387-977367775-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3708 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\QtQuick\Controls\Styles\Base\ApplicationWindowStyle.qml1⤵
- Modifies registry class
PID:3916
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3708