Overview
overview
10Static
static
3CLibrary.dll
windows10-2004-x64
8CheatInjector.exe
windows10-2004-x64
10bearer/libn.dll
windows10-2004-x64
1bearer/qge...er.dll
windows10-2004-x64
1bearer/qna...er.dll
windows10-2004-x64
1dll/Qt5Network.dll
windows10-2004-x64
1dll/Qt5Svg.dll
windows10-2004-x64
1dll/libEGL.dll
windows10-2004-x64
1dll/libGLESV2.dll
windows10-2004-x64
1dll/libeay32.dll
windows10-2004-x64
1dll/msvcp120.dll
windows10-2004-x64
3dll/msvcr120.dll
windows10-2004-x64
3dll/ssleay32.dll
windows10-2004-x64
1iconengine...on.dll
windows10-2004-x64
1Analysis
-
max time kernel
222s -
max time network
231s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
01-07-2024 18:06
Static task
static1
Behavioral task
behavioral1
Sample
CLibrary.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral2
Sample
CheatInjector.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
bearer/libn.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
bearer/qgenericbearer.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
bearer/qnativewifibearer.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral6
Sample
dll/Qt5Network.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
dll/Qt5Svg.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral8
Sample
dll/libEGL.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
dll/libGLESV2.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral10
Sample
dll/libeay32.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
dll/msvcp120.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral12
Sample
dll/msvcr120.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
dll/ssleay32.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral14
Sample
iconengines/qsvgicon.dll
Resource
win10v2004-20240611-en
General
-
Target
bearer/qgenericbearer.dll
-
Size
45KB
-
MD5
dba35d31c2b6797c8a4d38ae27d68e6e
-
SHA1
37948e71dc758964e0aa19aee063b50ef87a7290
-
SHA256
086d6ba24f34a269856c4e0159a860657590d05aabb2530247e685543b34c52f
-
SHA512
282e7613fe445785fa5ed345415bc008637b7d1d7988cc6da715b024311a1c29425f5edb26a1d90f301af408b60244dd81e1459eef2aab10b07d1ac352770b4b
-
SSDEEP
768:B+B5mIpDC6s1Hf30HdG806zHgaEsyJa5gYnDGMHgtpQu8KOqfyc:UB5mTfEHdh0GHga9nDGigvQu8K/J
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 4908 wrote to memory of 2484 4908 rundll32.exe rundll32.exe PID 4908 wrote to memory of 2484 4908 rundll32.exe rundll32.exe PID 4908 wrote to memory of 2484 4908 rundll32.exe rundll32.exe