Analysis

  • max time kernel
    1364s
  • max time network
    1153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-07-2024 13:51

General

  • Target

    Qt6Xml.dll

  • Size

    141KB

  • MD5

    9e0c3650a3ff9d199afcd3642b7356fa

  • SHA1

    799596e6694276a50e2d5b3953d9240525bc1193

  • SHA256

    6b75c4753dbed79398970e93aebcebe9d920d8a2b45a98d1a7c702fdf8ad8824

  • SHA512

    dd1a49ad0cf8522f961e91161a490c5a75460a0f638c020951e0752ec15d6b396df4756064e1b315fc3ebbaa0254904f75190a45e231bf0a6e5858f879c568f8

  • SSDEEP

    3072:/iJhBGNiJFwaK/ddUlb6f/mdH26sECWsgezyFViE:/iJhBGgIHdicO2mCqezyFViE

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt6Xml.dll,#1
    1⤵
      PID:2072

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2072-1-0x00007FF8A6570000-0x00007FF8A659C000-memory.dmp

      Filesize

      176KB

    • memory/2072-0-0x00007FF896210000-0x00007FF8963D8000-memory.dmp

      Filesize

      1.8MB

    • memory/2072-2-0x00007FF8A6570000-0x00007FF8A659C000-memory.dmp

      Filesize

      176KB

    • memory/2072-5-0x00007FF8A6550000-0x00007FF8A6566000-memory.dmp

      Filesize

      88KB

    • memory/2072-9-0x00007FF89DE00000-0x00007FF89DE5E000-memory.dmp

      Filesize

      376KB

    • memory/2072-11-0x00007FF895F40000-0x00007FF896210000-memory.dmp

      Filesize

      2.8MB

    • memory/2072-6-0x00007FF8963E0000-0x00007FF8969A6000-memory.dmp

      Filesize

      5.8MB

    • memory/2072-10-0x00007FF896210000-0x00007FF8963D8000-memory.dmp

      Filesize

      1.8MB

    • memory/2072-8-0x00007FF8A5B20000-0x00007FF8A5B3A000-memory.dmp

      Filesize

      104KB

    • memory/2072-7-0x00007FF8A5D00000-0x00007FF8A5D11000-memory.dmp

      Filesize

      68KB

    • memory/2072-13-0x00007FF897160000-0x00007FF897283000-memory.dmp

      Filesize

      1.1MB

    • memory/2072-12-0x00007FF8A23C0000-0x00007FF8A23E4000-memory.dmp

      Filesize

      144KB

    • memory/2072-4-0x00007FF8A9F10000-0x00007FF8A9F34000-memory.dmp

      Filesize

      144KB

    • memory/2072-3-0x00007FF8969B0000-0x00007FF896BDE000-memory.dmp

      Filesize

      2.2MB

    • memory/2072-14-0x00007FF894030000-0x00007FF895D99000-memory.dmp

      Filesize

      29.4MB