Overview

overview

7

Static

static

3

PolyMC-Win....1.exe

windows7-x64

7

PolyMC-Win....1.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

1

$PLUGINSDI...em.dll

windows10-2004-x64

1

$PLUGINSDI...gs.dll

windows7-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows7-x64

1

$PLUGINSDI...ec.dll

windows10-2004-x64

1

Qt6Charts.dll

windows7-x64

1

Qt6Charts.dll

windows10-2004-x64

1

Qt6Core.dll

windows7-x64

1

Qt6Core.dll

windows10-2004-x64

1

Qt6Core5Compat.dll

windows7-x64

1

Qt6Core5Compat.dll

windows10-2004-x64

1

Qt6Gui.dll

windows7-x64

1

Qt6Gui.dll

windows10-2004-x64

1

Qt6Network.dll

windows7-x64

1

Qt6Network.dll

windows10-2004-x64

1

Qt6OpenGL.dll

windows7-x64

1

Qt6OpenGL.dll

windows10-2004-x64

1

Qt6OpenGLWidgets.dll

windows7-x64

1

Qt6OpenGLWidgets.dll

windows10-2004-x64

1

Qt6Svg.dll

windows7-x64

1

Qt6Svg.dll

windows10-2004-x64

1

Qt6Widgets.dll

windows7-x64

1

Qt6Widgets.dll

windows10-2004-x64

1

Qt6Xml.dll

windows7-x64

1

Qt6Xml.dll

windows10-2004-x64

1

iconengine...on.dll

windows7-x64

1

iconengine...on.dll

windows10-2004-x64

1

imageformats/qgif.dll

windows7-x64

1

imageformats/qgif.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    1362s
  • max time network
    1157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-07-2024 13:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $PLUGINSDIR/nsExec.dll

  • Size

    11KB

  • MD5

    d9624f8a2014d31c4f114b78e20ad6b3

  • SHA1

    0c1b5761bc42372778ab5af27165cc52666924c4

  • SHA256

    1822b4b0c0111e82361ddf3d603d14392d80908c17d51d187bd2aa8d48e104e9

  • SHA512

    db2015d2f2783b1734a8b92154d9fe454d212ff586b66fb235986872b0ee5dc6c6e7d8498fe000097b3fa11aff2f6136dd28b618408d85995602e2664b941c01

  • SSDEEP

    192:JFArL9YKCLmpfHcQOliHERKXWRChDuatU4atUCvqx9:LcFCuZO4kRKG0ptUntUCyx9

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsExec.dll,#1
    1⤵
      PID:5100

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5100-0-0x00007FFDB7DA0000-0x00007FFDB7DAA000-memory.dmp

      Filesize

      40KB

      Download