60881fb0340f0104136d089421f819b3f42bbd5b42a095b6a66cfb756ec0d09a | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05/01/2025, 18:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Qt5Concurrent.dll
Size

128KB
MD5

31955f92dd3ca70cab821b6199018ebf
SHA1

3177661f6e066460f2c859d2d5453323b68d6eda
SHA256

d4a01961fff02cc38ab906d3bffaeb49db893edc624f840e06d07985086db29f
SHA512

ec5b65741685882008769abd68fb88cf12c58b0b9d76f0a6326f352ee7a78cc4567473c50e9abe12fd8af0c06bb1ae9840ee0d5f78024580aaaf1c34e0b14504
SSDEEP

3072:3Q8Eh7XgsZxlePu00k7hkNKSBMU+m3EkbnW6//V:3rg7wmePu01CXrUkV

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2756 wrote to memory of 2820	2756	rundll32.exe	30
PID 2756 wrote to memory of 2820	2756	rundll32.exe	30
PID 2756 wrote to memory of 2820	2756	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Concurrent.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2756
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2756 -s 212
  2⤵
  PID:2820

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads