Overview

overview

8

Static

static

1

AQi_4_6_0_31_155.exe

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AQi_4_6_0_31_155.exe

  • Size

    84.5MB

  • Sample

    230411-l3gqlsdd7y

  • MD5

    037a07d3e2e83142a4e4e1c4c8efa86c

  • SHA1

    2a2d43eb2f2f7a6770cb442aed2b7486044f791f

  • SHA256

    c1bd98744f036b4bdf1786a60b4ba0d9cb08b53c93be68c46be19d4d0520f66c

  • SHA512

    239d0d437319e3f0174dfc7aceecc4e3cdc23534e9b1dbd0ec361f1e7574103121f920e1a71062a0cdc3819851494caaa68b541654b129595d905414ca4490f3

  • SSDEEP

    1572864:dUKdDFU+0QpiyNmFPtsf+pO7J0A2zE3q13TYa8gAI/HbMG0tB4Zhk690Rmn:d1DF7YUgPtw7KA2zE0s+StB4Dd9Dn

Score
8/10
discoverymacromacro_on_actionxlm

Malware Config

Targets

    • Target

      AQi_4_6_0_31_155.exe

    • Size

      84.5MB

    • MD5

      037a07d3e2e83142a4e4e1c4c8efa86c

    • SHA1

      2a2d43eb2f2f7a6770cb442aed2b7486044f791f

    • SHA256

      c1bd98744f036b4bdf1786a60b4ba0d9cb08b53c93be68c46be19d4d0520f66c

    • SHA512

      239d0d437319e3f0174dfc7aceecc4e3cdc23534e9b1dbd0ec361f1e7574103121f920e1a71062a0cdc3819851494caaa68b541654b129595d905414ca4490f3

    • SSDEEP

      1572864:dUKdDFU+0QpiyNmFPtsf+pO7J0A2zE3q13TYa8gAI/HbMG0tB4Zhk690Rmn:d1DF7YUgPtw7KA2zE0s+StB4Dd9Dn

    Score
    8/10
    discoverymacromacro_on_actionxlm

    • Office macro that triggers on suspicious action

      Office document macro which triggers in special circumstances - often malicious.

      macromacro_on_action

    • Suspicious Office macro

      Office document equipped with 4.0 macros.

      macroxlm

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks