Overview

overview

8

Static

static

RFQ.scr

windows7_x64

8

RFQ.scr

windows10_x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    RFQ.scr

  • Size

    323KB

  • Sample

    200707-vpcshvw2kn

  • MD5

    ea7a70eb4f75f34597cea8f569a39543

  • SHA1

    e91593b1a0e7df15765b33250477f584f12d42c0

  • SHA256

    9eb46ce54466b221c7f56d3af4c22be517472189d7e907ead1b4c3fa4cfeb831

  • SHA512

    46efe034cdc453dd4bb6c6a00256e341943eae5d05f2d2ca3c445919114d5f3d1aa499f6d989c9c73ea0c78749916bd4a9f8909db88057d3a76d87bf77e09594

Score
8/10
persistence

Malware Config

Targets

    • Target

      RFQ.scr

    • Size

      323KB

    • MD5

      ea7a70eb4f75f34597cea8f569a39543

    • SHA1

      e91593b1a0e7df15765b33250477f584f12d42c0

    • SHA256

      9eb46ce54466b221c7f56d3af4c22be517472189d7e907ead1b4c3fa4cfeb831

    • SHA512

      46efe034cdc453dd4bb6c6a00256e341943eae5d05f2d2ca3c445919114d5f3d1aa499f6d989c9c73ea0c78749916bd4a9f8909db88057d3a76d87bf77e09594

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run entry to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks