Overview
overview
10Static
static
10TCQLDD.apk
android-9-x86
1kqkticwjgzy.dat
windows7-x64
3kqkticwjgzy.dat
windows10-2004-x64
3l41740f07_a32.so
debian-9-armhf
1l41740f07_a64.so
ubuntu-18.04-amd64
l41740f07_a64.so
debian-9-armhf
l41740f07_a64.so
debian-9-mips
l41740f07_a64.so
debian-9-mipsel
l41740f07_x64.so
ubuntu-18.04-amd64
1l41740f07_x86.so
ubuntu-18.04-amd64
1Analysis
-
max time kernel
140s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
25-10-2023 04:15
Behavioral task
behavioral1
Sample
TCQLDD.apk
Resource
android-x86-arm-20231023-en
Behavioral task
behavioral2
Sample
kqkticwjgzy.dat
Resource
win7-20231023-en
Behavioral task
behavioral3
Sample
kqkticwjgzy.dat
Resource
win10v2004-20231020-en
Behavioral task
behavioral4
Sample
l41740f07_a32.so
Resource
debian9-armhf-20231023.1-en
Behavioral task
behavioral5
Sample
l41740f07_a64.so
Resource
ubuntu1804-amd64-20231023-en
Behavioral task
behavioral6
Sample
l41740f07_a64.so
Resource
debian9-armhf-20231023.1-en
Behavioral task
behavioral7
Sample
l41740f07_a64.so
Resource
debian9-mipsbe-20231020-en
Behavioral task
behavioral8
Sample
l41740f07_a64.so
Resource
debian9-mipsel-20231023-en
Behavioral task
behavioral9
Sample
l41740f07_x64.so
Resource
ubuntu1804-amd64-20231023-en
Behavioral task
behavioral10
Sample
l41740f07_x86.so
Resource
ubuntu1804-amd64-20231023-en
General
-
Target
kqkticwjgzy.dat
-
Size
2KB
-
MD5
6b1c53de635ec1415aaac4aa29d22548
-
SHA1
88aed7f3d86dce2fd168ae4890c8014e6272062d
-
SHA256
44a33711b2353fe2b338167373064182cf7b16bb322c60dd36a649f429427a19
-
SHA512
4fc246c6bf0efa71b511950210a2154f4afdb045de8b6772d01854cdb6847970b0017d6a089eb97d7447ef608a6b90af2e62de44d664963e4530885cad6b5286
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc Process Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid Process 3924 OpenWith.exe