4ddaa14f57744b2cac875ffb15a09e49246b9a45ab3c1122dca7aa47f820a1f2

Analysis

max time kernel
118s
max time network
125s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
30-06-2024 07:11

Target

Qt5Gui.dll
Size

5.6MB
MD5

09d02d3a0a98525e416feffd2b759028
SHA1

7f84faa29987dd60c5e1651096efa8b4b95d70e1
SHA256

f84f0c5e177f12b1f9e7054ff15bf9640cce8da8bbaf1d08bc40636227bc105a
SHA512

e622acba8f6cff71061aafb74f5b9006477d521ead4e48f4f0b1fffa70b85b822fbe309de703ab0dc38d87beede8881766dd45330465365a5d6a32b71119228d
SSDEEP

49152:zKUDGaBVW3sDAPNaiCZPcSnt8KQ6oOtA/tiG7WwjrAxLXwQ98vd+hc0WM66fL5cn:WUKssPdOy/tZWnXThVc5tnB6NDr2

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 1704 wrote to memory of 2432	1704	rundll32.exe	rundll32.exe
PID 1704 wrote to memory of 2432	1704	rundll32.exe	rundll32.exe
PID 1704 wrote to memory of 2432	1704	rundll32.exe	rundll32.exe
PID 1704 wrote to memory of 2432	1704	rundll32.exe	rundll32.exe
PID 1704 wrote to memory of 2432	1704	rundll32.exe	rundll32.exe
PID 1704 wrote to memory of 2432	1704	rundll32.exe	rundll32.exe
PID 1704 wrote to memory of 2432	1704	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Gui.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1704

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Qt5Gui.dll,#1
2⤵
PID:2432