7b789067fc92947c089c7bd54324742156f04d7a2d670de4e5170c87abf72f3d | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

_internal/LIBPQ.dll

windows7-x64

1

_internal/LIBPQ.dll

windows10-2004-x64

1

_internal/...Qt.dll

windows7-x64

1

_internal/...Qt.dll

windows10-2004-x64

1

_internal/...40.dll

windows7-x64

1

_internal/...40.dll

windows10-2004-x64

1

_internal/..._1.dll

windows7-x64

1

_internal/..._1.dll

windows10-2004-x64

1

_internal/...th.dll

windows7-x64

1

_internal/...th.dll

windows10-2004-x64

1

_internal/...re.dll

windows7-x64

1

_internal/...re.dll

windows10-2004-x64

1

_internal/...us.dll

windows7-x64

1

_internal/...us.dll

windows10-2004-x64

1

_internal/...er.dll

windows7-x64

1

_internal/...er.dll

windows10-2004-x64

1

_internal/...ui.dll

windows7-x64

1

_internal/...ui.dll

windows10-2004-x64

1

_internal/...lp.dll

windows7-x64

1

_internal/...lp.dll

windows10-2004-x64

1

_internal/...on.dll

windows7-x64

1

_internal/...on.dll

windows10-2004-x64

1

_internal/...ia.dll

windows7-x64

1

_internal/...ia.dll

windows10-2004-x64

1

_internal/...ts.dll

windows7-x64

1

_internal/...ts.dll

windows10-2004-x64

1

_internal/...rk.dll

windows7-x64

1

_internal/...rk.dll

windows10-2004-x64

1

_internal/...fc.dll

windows7-x64

1

_internal/...fc.dll

windows10-2004-x64

1

_internal/...GL.dll

windows7-x64

1

_internal/...GL.dll

windows10-2004-x64

1

Analysis

max time kernel
138s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/12/2024, 23:42

Sharing

Static task

static1

backdoor pyinstaller warmcookie

3 signatures

Behavioral task

behavioral1

Sample

_internal/LIBPQ.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

_internal/LIBPQ.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

_internal/PyQt5/Qt.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

_internal/PyQt5/Qt.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

_internal/PyQt5/Qt5/bin/MSVCP140.dll

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

_internal/PyQt5/Qt5/bin/MSVCP140.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

_internal/PyQt5/Qt5/bin/MSVCP140_1.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

_internal/PyQt5/Qt5/bin/MSVCP140_1.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

_internal/PyQt5/Qt5/bin/Qt5Bluetooth.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

_internal/PyQt5/Qt5/bin/Qt5Bluetooth.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

_internal/PyQt5/Qt5/bin/Qt5Core.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

_internal/PyQt5/Qt5/bin/Qt5Core.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

_internal/PyQt5/Qt5/bin/Qt5DBus.dll

Resource

win7-20241023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

_internal/PyQt5/Qt5/bin/Qt5DBus.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

_internal/PyQt5/Qt5/bin/Qt5Designer.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

_internal/PyQt5/Qt5/bin/Qt5Designer.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

_internal/PyQt5/Qt5/bin/Qt5Gui.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

_internal/PyQt5/Qt5/bin/Qt5Gui.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

_internal/PyQt5/Qt5/bin/Qt5Help.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

_internal/PyQt5/Qt5/bin/Qt5Help.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

_internal/PyQt5/Qt5/bin/Qt5Location.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

_internal/PyQt5/Qt5/bin/Qt5Location.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

_internal/PyQt5/Qt5/bin/Qt5Multimedia.dll

Resource

win7-20241010-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

_internal/PyQt5/Qt5/bin/Qt5Multimedia.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

_internal/PyQt5/Qt5/bin/Qt5MultimediaWidgets.dll

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

_internal/PyQt5/Qt5/bin/Qt5MultimediaWidgets.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

_internal/PyQt5/Qt5/bin/Qt5Network.dll

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

_internal/PyQt5/Qt5/bin/Qt5Network.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

_internal/PyQt5/Qt5/bin/Qt5Nfc.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

_internal/PyQt5/Qt5/bin/Qt5Nfc.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

_internal/PyQt5/Qt5/bin/Qt5OpenGL.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

_internal/PyQt5/Qt5/bin/Qt5OpenGL.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

_internal/PyQt5/Qt5/bin/Qt5Location.dll
Size

1.6MB
MD5

3e8f0d7a97856a7a4fab71ce11d0c46e
SHA1

2402efd8e996dd45f10a42f6d0d5dba9427d9d57
SHA256

e25d5470ebf057743e9a427358aa1f13b661442eddbd695d20ac421a97e19a40
SHA512

c37bb5535906afae12d317408e11e91514178b0b74fa08f17d7c7c47963367a4f8768721bf2d156af2193366dc79630729bbb082f11950c14205521519f3c9f0
SSDEEP

49152:IkbrrRuQFClXJLeYyj+LZ1s3yoqKYe+Ok:InQgLz

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\_internal\PyQt5\Qt5\bin\Qt5Location.dll,#1
1⤵
PID:4836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4836-0-0x00007FFA49850000-0x00007FFA49C48000-memory.dmp

Filesize
4.0MB

Download

© 2018-2025

Terms | Privacy