Overview
overview
7Static
static
7MEGAsyncSetup64.exe
windows7-x64
7MEGAsyncSetup64.exe
windows10-2004-x64
4MEGAsync.exe
windows7-x64
3MEGAsync.exe
windows10-2004-x64
1MEGAupdater.exe
windows7-x64
1MEGAupdater.exe
windows10-2004-x64
1Qt/labs/fo...in.dll
windows7-x64
1Qt/labs/fo...in.dll
windows10-2004-x64
1Qt/labs/se...in.dll
windows7-x64
1Qt/labs/se...in.dll
windows10-2004-x64
1Qt5Core.dll
windows7-x64
1Qt5Core.dll
windows10-2004-x64
1Qt5Gui.dll
windows7-x64
1Qt5Gui.dll
windows10-2004-x64
1Qt5Network.dll
windows7-x64
1Qt5Network.dll
windows10-2004-x64
1Qt5Qml.dll
windows7-x64
1Qt5Qml.dll
windows10-2004-x64
1Qt5QmlModels.dll
windows7-x64
1Qt5QmlModels.dll
windows10-2004-x64
1Qt5QmlWork...pt.dll
windows7-x64
1Qt5QmlWork...pt.dll
windows10-2004-x64
1Qt5Quick.dll
windows7-x64
1Qt5Quick.dll
windows10-2004-x64
1Qt5QuickControls2.dll
windows7-x64
1Qt5QuickControls2.dll
windows10-2004-x64
1Qt5QuickTe...s2.dll
windows7-x64
1Qt5QuickTe...s2.dll
windows10-2004-x64
1Qt5Svg.dll
windows7-x64
1Qt5Svg.dll
windows10-2004-x64
1Qt5Widgets.dll
windows7-x64
1Qt5Widgets.dll
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
21-11-2024 18:55
Behavioral task
behavioral1
Sample
MEGAsyncSetup64.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
MEGAsyncSetup64.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
MEGAsync.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
MEGAsync.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
MEGAupdater.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
MEGAupdater.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Qt/labs/folderlistmodel/qmlfolderlistmodelplugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Qt/labs/folderlistmodel/qmlfolderlistmodelplugin.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Qt/labs/settings/qmlsettingsplugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Qt/labs/settings/qmlsettingsplugin.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Qt5Core.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Qt5Core.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Qt5Gui.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Qt5Gui.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Qt5Network.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Qt5Network.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Qt5Qml.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Qt5Qml.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Qt5QmlModels.dll
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
Qt5QmlModels.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Qt5QmlWorkerScript.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Qt5QmlWorkerScript.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Qt5Quick.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Qt5Quick.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Qt5QuickControls2.dll
Resource
win7-20241010-en
Behavioral task
behavioral26
Sample
Qt5QuickControls2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Qt5QuickTemplates2.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Qt5QuickTemplates2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
Qt5Svg.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Qt5Svg.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
Qt5Widgets.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Qt5Widgets.dll
Resource
win10v2004-20241007-en
General
-
Target
Qt5QmlModels.dll
-
Size
437KB
-
MD5
ff3d09d70f17e94785f1cf8fc0385895
-
SHA1
68aab8f756a45b08c32d0403808d7206d10541c9
-
SHA256
20716ca6f57aa338b64b8c76778ff608aa6a0448faadc426ddaa716204bf99ac
-
SHA512
7bb3418019bba111d63e34093735c2c21f5c9e7197d74d75124dcc9984931d9c9d232f763cadd6cdf8c87007f2cccdd29aece68cadbe9e7fc476ba52bad1350f
-
SSDEEP
6144:ueyNFRATgJut1rrc7YcgdGEZvWT+46zaHnP+YXy4gYfF:ueyNFRAgut1rrc7YvdGIWT+tzcUU
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1072 wrote to memory of 2680 1072 rundll32.exe 30 PID 1072 wrote to memory of 2680 1072 rundll32.exe 30 PID 1072 wrote to memory of 2680 1072 rundll32.exe 30