Overview

overview

7

Static

static

3

QMailFilte...up.exe

windows7-x64

1

QMailFilte...up.exe

windows10-2004-x64

1

QMailFilte...pk.dll

windows7-x64

7

QMailFilte...pk.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    13390e5472fc5411e0086f83bd1c8ece

  • Size

    18KB

  • Sample

    231225-ks6rbafab3

  • MD5

    13390e5472fc5411e0086f83bd1c8ece

  • SHA1

    bd54f1ad57181291945f2f9ce0830f835c5c11df

  • SHA256

    4294b28dde0ff9a1d286e08ba6970a68e8fdcaee1f74449a7ef8f963bd226f70

  • SHA512

    644139611818a2a88c25f0f7de423dbb5c2d5107db395705b58ae9056dd3d86a7edb01dcf5f3dac83877cca8af6851b43556be478475774453b05ececa97aa14

  • SSDEEP

    384:0FRk0rrjyWL/SAHGAK7unl+IfDxjG1wE6Tdpt0YKb+iBhvoPI:Mrrj5/nnMunl1fFhE6TLtFiBtoQ

Score
7/10

Malware Config

Targets

    • Target

      QMailFilter.v2.4-Keygen/keygen_setup.exe

    • Size

      5KB

    • MD5

      49f1dcd39d8ba0799e1b7e0431d0aae3

    • SHA1

      6fd076aa6562cac076fe4af21af80e2ad501b862

    • SHA256

      a446b43060a99720e19b6b1f1a78980debfd51d5f149eb0d756ec2f344572b73

    • SHA512

      1f5d52a55bedcdf1679937f848e7b3708be9377fe4ebc8a359fe279ab9cad2ac512c77b6bb3ec9d2112d43387907d05724c27a991e279e4e4c19d78fcf057f56

    • SSDEEP

      48:OEPCLbzStJdDdWuFh7AN+FyAGV0kbeDo3yCZDUyauGRhBQBFxlYSeJY8JTamkREV:nP0kPdLFZbcznykUyaBRhBiGkR69

    Score
    1/10
    behavioral1behavioral2

    • Target

      QMailFilter.v2.4-Keygen/lpk.dll

    • Size

      45KB

    • MD5

      fcdc863503f8b1be2104614f948179fc

    • SHA1

      71485de3e22c42df5f0c9e39f47420e48195fef5

    • SHA256

      d80b59ded380078af93526a8fb78bf19ab05a924958b15a9fdcee8b0e31c3f3a

    • SHA512

      ca0bf43bf2615e32a496a8cd65f2db8bee08c19da36310bc58a7f7dde8849d9aea610a054e3088a9c6bf0284400370806fd38e4e89ba54a35f0f13e8a9f6c2b9

    • SSDEEP

      768:zojY9Pg68uUCS77GhGLhLpms1RZo9yHHojY9P:GmY6BS7LL18+o9yHSm

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks