General
-
Target
32611c16dd768c067ff71dbb467c3c5140b1dd912aeb63a7663f859b43addde4
-
Size
443KB
-
Sample
221125-196ewaeb4t
-
MD5
fe89388d028f46716d51bf3d6c7864bd
-
SHA1
c7b7a2c8cab3fb521eb20c1749661aff4c36ccc8
-
SHA256
32611c16dd768c067ff71dbb467c3c5140b1dd912aeb63a7663f859b43addde4
-
SHA512
7afacb0d6f97a38f48cab6a74680c680db1898fe53967e83fc656a524d24d2b81022c4528670bc93e374240b50cbf0994579e289caa6ebff3194fe5efa15a968
-
SSDEEP
12288:kr8WZhRZxS6EOG8dzG+0Mol0VgeHZwECjeOgKy:fWZhI6EOGsS+03mmRjeOI
Static task
static1
Behavioral task
behavioral1
Sample
ybtag_dqc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ybtag_dqc.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
ybtag_dqc.exe
-
Size
1.1MB
-
MD5
beb71101e8b553051548af616a2fbf22
-
SHA1
d8d9917524aef1b5beb5d7595a8a41be28887e9d
-
SHA256
3c2253e2c2984cf82fa3cb998d928f2eeaf2e9e9ea1f5fe7114d31aa50c7f475
-
SHA512
3d419d0c249dbf7d64cb5d2632790522be7722669c75351a201cc4173f59e1cd9f4f6c3b915e82505e707aacc16ea7de9fc5e43540ae39381d422872c6063134
-
SSDEEP
24576:ASBpyxrL/FdnUrNAqT95Vivrp2d436G3G:ASGLN6TT9/iTpctF
Score9/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-