Overview

overview

7

Static

static

3

Qfczuiq.exe

windows7-x64

7

Qfczuiq.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Qfczuiq.exe

  • Size

    1.4MB

  • Sample

    230629-r414jadf22

  • MD5

    4ee88295d65b7a6e566d200a1c842801

  • SHA1

    5dfb320e933425cea8188f8f7dab346796c3b090

  • SHA256

    b93b9b4b0168407f63a6c2c16a96e4a4b41d5d715bdb9f46254a214570ba1b6b

  • SHA512

    caab773590efe1cab87d209057bb557d52034b522c3fa47e4fb88b792418928cc0eb9a9d45c3c9131bd4af90153d8c44fae0040b04dec484e317ab4c44c7a6c4

  • SSDEEP

    24576:ZzwYWydodaTT0DGLxDoNEop5N+cEzJz2KBTDL+jfloYhbhi:6FydodaTT0SxcXp5KzQkWj9oEi

Score
7/10
persistence

Malware Config

Targets

    • Target

      Qfczuiq.exe

    • Size

      1.4MB

    • MD5

      4ee88295d65b7a6e566d200a1c842801

    • SHA1

      5dfb320e933425cea8188f8f7dab346796c3b090

    • SHA256

      b93b9b4b0168407f63a6c2c16a96e4a4b41d5d715bdb9f46254a214570ba1b6b

    • SHA512

      caab773590efe1cab87d209057bb557d52034b522c3fa47e4fb88b792418928cc0eb9a9d45c3c9131bd4af90153d8c44fae0040b04dec484e317ab4c44c7a6c4

    • SSDEEP

      24576:ZzwYWydodaTT0DGLxDoNEop5N+cEzJz2KBTDL+jfloYhbhi:6FydodaTT0SxcXp5KzQkWj9oEi

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks