f22a998e7d8ab415dfe854871c7a13d3b5256f41729744e7b0cf3bdafc169989 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
28/03/2025, 10:32

Sharing

Report Analysis Logs

General

Target

Qt5Concurrent.dll
Size

128KB
MD5

31955f92dd3ca70cab821b6199018ebf
SHA1

3177661f6e066460f2c859d2d5453323b68d6eda
SHA256

d4a01961fff02cc38ab906d3bffaeb49db893edc624f840e06d07985086db29f
SHA512

ec5b65741685882008769abd68fb88cf12c58b0b9d76f0a6326f352ee7a78cc4567473c50e9abe12fd8af0c06bb1ae9840ee0d5f78024580aaaf1c34e0b14504
SSDEEP

3072:3Q8Eh7XgsZxlePu00k7hkNKSBMU+m3EkbnW6//V:3rg7wmePu01CXrUkV

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2344 wrote to memory of 2564	2344	rundll32.exe	31
PID 2344 wrote to memory of 2564	2344	rundll32.exe	31
PID 2344 wrote to memory of 2564	2344	rundll32.exe	31

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Concurrent.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2344
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2344 -s 216
  2⤵
  PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads