Overview

overview

10

Static

static

10

_internal/LIBPQ.dll

windows7-x64

1

_internal/LIBPQ.dll

windows10-2004-x64

1

_internal/...Qt.dll

windows7-x64

1

_internal/...Qt.dll

windows10-2004-x64

1

_internal/...40.dll

windows7-x64

1

_internal/...40.dll

windows10-2004-x64

1

_internal/..._1.dll

windows7-x64

1

_internal/..._1.dll

windows10-2004-x64

1

_internal/...th.dll

windows7-x64

1

_internal/...th.dll

windows10-2004-x64

1

_internal/...re.dll

windows7-x64

1

_internal/...re.dll

windows10-2004-x64

1

_internal/...us.dll

windows7-x64

1

_internal/...us.dll

windows10-2004-x64

1

_internal/...er.dll

windows7-x64

1

_internal/...er.dll

windows10-2004-x64

1

_internal/...ui.dll

windows7-x64

1

_internal/...ui.dll

windows10-2004-x64

1

_internal/...lp.dll

windows7-x64

1

_internal/...lp.dll

windows10-2004-x64

1

_internal/...on.dll

windows7-x64

1

_internal/...on.dll

windows10-2004-x64

1

_internal/...ia.dll

windows7-x64

1

_internal/...ia.dll

windows10-2004-x64

1

_internal/...ts.dll

windows7-x64

1

_internal/...ts.dll

windows10-2004-x64

1

_internal/...rk.dll

windows7-x64

1

_internal/...rk.dll

windows10-2004-x64

1

_internal/...fc.dll

windows7-x64

1

_internal/...fc.dll

windows10-2004-x64

1

_internal/...GL.dll

windows7-x64

1

_internal/...GL.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    142s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/12/2024, 23:42 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    _internal/LIBPQ.dll

  • Size

    283KB

  • MD5

    d448812c0806981e7e0587e8169cf6f2

  • SHA1

    e859313f5f60e2b96a4470c2ae10f134c4b2c535

  • SHA256

    e3ad50c1b4bdfe37f62539c8a8386100933c1273981c54fc748669f5b01be419

  • SHA512

    e8a727d49f5e2785c5d6b1af63e303e85ad65a2ec7f211901da59cfd32097e8fbf8a0a5ce72ef8da448ccacc51bec9576917ea07577a58414aed321a00b7c59a

  • SSDEEP

    6144:Dq/XnHBwK+f9ZO/immLqUfI43z7U8r7apSOOB8trbs:rf9ZO/imm+uQhO4s

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\_internal\LIBPQ.dll,#1
    1⤵
      PID:1364

    Network

    • flag-us
      DNS
      8.8.8.8.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      8.8.8.8.in-addr.arpa
      IN PTR
      Response
      8.8.8.8.in-addr.arpa
      IN PTR
      dnsgoogle
    • flag-us
      DNS
      97.17.167.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      97.17.167.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      81.144.22.2.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      81.144.22.2.in-addr.arpa
      IN PTR
      Response
      81.144.22.2.in-addr.arpa
      IN PTR
      a2-22-144-81deploystaticakamaitechnologiescom
    • flag-us
      DNS
      68.32.126.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      68.32.126.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      228.249.119.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      228.249.119.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      50.23.12.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      50.23.12.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      15.164.165.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      15.164.165.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      172.210.232.199.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      172.210.232.199.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      21.49.80.91.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      21.49.80.91.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      14.227.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      14.227.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      91.16.208.104.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      91.16.208.104.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      8.8.8.8.in-addr.arpa
      dns
      66 B
       90 B
       1
      1

      DNS Request

      8.8.8.8.in-addr.arpa

    • 8.8.8.8:53
      97.17.167.52.in-addr.arpa
      dns
      71 B
       145 B
       1
      1

      DNS Request

      97.17.167.52.in-addr.arpa

    • 8.8.8.8:53
      81.144.22.2.in-addr.arpa
      dns
      70 B
       133 B
       1
      1

      DNS Request

      81.144.22.2.in-addr.arpa

    • 8.8.8.8:53
      68.32.126.40.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      68.32.126.40.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      228.249.119.40.in-addr.arpa
      dns
      73 B
       159 B
       1
      1

      DNS Request

      228.249.119.40.in-addr.arpa

    • 8.8.8.8:53
      50.23.12.20.in-addr.arpa
      dns
      70 B
       156 B
       1
      1

      DNS Request

      50.23.12.20.in-addr.arpa

    • 8.8.8.8:53
      15.164.165.52.in-addr.arpa
      dns
      72 B
       146 B
       1
      1

      DNS Request

      15.164.165.52.in-addr.arpa

    • 8.8.8.8:53
      172.210.232.199.in-addr.arpa
      dns
      74 B
       128 B
       1
      1

      DNS Request

      172.210.232.199.in-addr.arpa

    • 8.8.8.8:53
      21.49.80.91.in-addr.arpa
      dns
      70 B
       145 B
       1
      1

      DNS Request

      21.49.80.91.in-addr.arpa

    • 8.8.8.8:53
      14.227.111.52.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      14.227.111.52.in-addr.arpa

    • 8.8.8.8:53
      91.16.208.104.in-addr.arpa
      dns
      72 B
       146 B
       1
      1

      DNS Request

      91.16.208.104.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.