5690987418e7898137bb9f8e706d3ff8f196b1dc612be983012524235f64f6af | Triage

Resubmissions

21-11-2023 21:25

231121-z9p78agf85 10

16-04-2023 14:14

230416-rj2vbsca6z 10

Analysis

max time kernel
85s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
16-04-2023 14:14

Sharing

Report Analysis Logs

General

Target

QZK RAT Free/FontAwesome.Sharp.dll
Size

727KB
MD5

af7ea96479d85d6e858d27eadea10c49
SHA1

fc4dabf14bb0b61c3701815c8824347803af7877
SHA256

d7667c2d702e99eb009eaf917eaf177e855907ec5f10ee200eca7a57e6116722
SHA512

afcda3a046c5ace2d0c6c9ca97bf72267434a046b886baf36412cd4e7afaad992b02074aee4f4e72cfd3af4d59e267b9f6fe5e8c059a745990a9463cd9f74921
SSDEEP

12288:/mSRD6HQda9iky5eQXZ13KR8urDS9DukunSU8av+IL8:/lsQda9iky116R8urDS1I8av+I

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\QZK RAT Free\FontAwesome.Sharp.dll",#1
1⤵
PID:2128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...