Analysis
-
max time kernel
91s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-11-2024 07:43
General
-
Target
$_10_/Qt5Gui.dll
-
Size
6.1MB
-
MD5
ebcc111c829b2c3a424489e371eabf34
-
SHA1
23b48f7cdcfbaab5539c3ddef47ac1bd1e2ba346
-
SHA256
724fc4e53dd6dd11ad4f93bfa8e8cd8563c75af482023cc970c6eafa10e6f2b6
-
SHA512
e4d4ac14bfc43e1552fd9036ea70d5b7bc519670d6fc76129a3f1261a27f12f992a5eed3b02e2faae9a0ab9fd2324a3ab79bc652112360ed8e365e23d498bba6
-
SSDEEP
98304:Hug1SBox2gjZ5p0eUS+j/0m/i67+pOeewHC25bSbIwue8UZVN3L/wxQXLKhYQSjV:d1/xxjZsLj8Yeewi2tde8vxeLiYDZ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$_10_\Qt5Gui.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$_10_\Qt5Gui.dll,#12⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2320 -s 7083⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2320 -ip 23201⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
6.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
3.5MB
-
Filesize
428KB
-
Filesize
1.4MB
-
Filesize
240KB
-
Filesize
152KB
-
Filesize
476KB
-
Filesize
484KB
-
Filesize
3.5MB
-
Filesize
1.2MB
-
Filesize
1.8MB
-
Filesize
120KB
-
Filesize
440KB
-
Filesize
5.5MB
-
Filesize
572KB
-
Filesize
1.1MB
-
Filesize
1.7MB
-
Filesize
152KB
-
Filesize
6.2MB
-
Filesize
80KB
-
Filesize
1.8MB