General
-
Target
New Banking Details.jar
-
Size
410KB
-
Sample
200806-lafzyx8wee
-
MD5
7ff8c97e2fe1c972876ee4cc84238074
-
SHA1
fb1d4dff5cedba4dc4eb0ddf662fc9be2d39e696
-
SHA256
d4a142b9eba6dff66deadaea2777b5ce1d7fc551f94b5e7f87ba6a84709106c9
-
SHA512
0531582de07c475fa4ebe358d5336ed810fcdb0adbcbcd8738a66b4aa7cd66eeb11837ce63cd534a23ff277f8a5d50e7a806675379f97e8e34cf45ede9d86759
Score
10/10
Malware Config
Targets
-
-
Target
New Banking Details.jar
-
Size
410KB
-
MD5
7ff8c97e2fe1c972876ee4cc84238074
-
SHA1
fb1d4dff5cedba4dc4eb0ddf662fc9be2d39e696
-
SHA256
d4a142b9eba6dff66deadaea2777b5ce1d7fc551f94b5e7f87ba6a84709106c9
-
SHA512
0531582de07c475fa4ebe358d5336ed810fcdb0adbcbcd8738a66b4aa7cd66eeb11837ce63cd534a23ff277f8a5d50e7a806675379f97e8e34cf45ede9d86759
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
QarallaxRAT
Qarallax is a RAT developed by Quaverse and sold as RaaS (RAT as a Service).
-
Qarallax RAT support DLL
-
Disables Task Manager via registry modification
-
Disables use of System Restore points
-
Sets file execution options in registry
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-