597c644db7648b6ccc73d997b23b04be5053e352ecad38dd09936922d29df035

Analysis

max time kernel
14s
max time network
20s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
23-12-2024 16:23

Target

die_win64_portable/Qt5Network.dll
Size

1.3MB
MD5

3569693d5bae82854de1d88f86c33184
SHA1

1a6084acfd2aa4d32cedfb7d9023f60eb14e1771
SHA256

4ef341ae9302e793878020f0740b09b0f31cb380408a697f75c69fdbd20fc7a1
SHA512

e5eff4a79e1bdae28a6ca0da116245a9919023560750fc4a087cdcd0ab969c2f0eeec63bbec2cd5222d6824a01dd27d2a8e6684a48202ea733f9bb2fab048b32
SSDEEP

24576:eXPn73RXox1U9M0m+1ffSDY565RzHUY1iaRy95hdGehEM:+7hXU1U95m4ff9A5RviaRy9NGI

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2468 wrote to memory of 2248	2468	rundll32.exe	28
PID 2468 wrote to memory of 2248	2468	rundll32.exe	28
PID 2468 wrote to memory of 2248	2468	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\die_win64_portable\Qt5Network.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2468
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2468 -s 224
  2⤵
  PID:2248