Overview

overview

8

Static

static

QTN SH-23-...R).exe

windows7-x64

8

QTN SH-23-...R).exe

windows10-2004-x64

8

Resubmissions

01-02-2023 15:15

230201-snbdlscb9v 8

01-02-2023 14:40

230201-r1wdwaab29 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    QTN SH-23-091406(LR1 CARRIER).exe

  • Size

    286KB

  • Sample

    230201-snbdlscb9v

  • MD5

    3d2997c1e6e61f075938e9db2cff60bb

  • SHA1

    0b3a1e43e74c878e0a1223f142db9fe56948c22a

  • SHA256

    02070af1fb7addd7e49ec65159e87b2505ece1e70e173d4f9553e7f33228b0f4

  • SHA512

    88e26fc6462c1cb9ca4a819766076f6f43786ffa006ef576d3c4c7d079cc96d94bf7f38e42a2e5833c2b843cba7b4387d3909da906e0ecacbfa45265d0751f75

  • SSDEEP

    6144:/Ya6U2BGwSDlDTpk56wqDqnXdx8WVYIOTbGx8KwUk0/66/XFT9w:/Y6q2N1mBqDqdx7VYFbGSFyD9w

Score
8/10
persistence

Malware Config

Targets

    • Target

      QTN SH-23-091406(LR1 CARRIER).exe

    • Size

      286KB

    • MD5

      3d2997c1e6e61f075938e9db2cff60bb

    • SHA1

      0b3a1e43e74c878e0a1223f142db9fe56948c22a

    • SHA256

      02070af1fb7addd7e49ec65159e87b2505ece1e70e173d4f9553e7f33228b0f4

    • SHA512

      88e26fc6462c1cb9ca4a819766076f6f43786ffa006ef576d3c4c7d079cc96d94bf7f38e42a2e5833c2b843cba7b4387d3909da906e0ecacbfa45265d0751f75

    • SSDEEP

      6144:/Ya6U2BGwSDlDTpk56wqDqnXdx8WVYIOTbGx8KwUk0/66/XFT9w:/Y6q2N1mBqDqdx7VYFbGSFyD9w

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks