Overview

overview

5

Static

static

QT 21297329.EXE

windows7_x64

5

QT 21297329.EXE

windows10_x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target
    QT 21297329.EXE
  • Size 684KB
  • Sample210208-bcr8t76b76
  • SHA256 35735d73d2e53b690b4ea0e80d68aaabdf1ec93e0d68d349cf487c2580600e23
  • MD5 SHA1 SHA512
Score
5/10
ransomware

Malware Config

Targets

    • Target
      QT 21297329.EXE
    • Size 684KB
    • SHA256 35735d73d2e53b690b4ea0e80d68aaabdf1ec93e0d68d349cf487c2580600e23
    • MD5 SHA1 SHA512
    Score
    5/10
    ransomware

    • Enumerates physical storage devices

      Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

      ransomware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks