Overview

overview

7

Static

static

3

quantizer/...er.exe

windows10-1703-x64

1

quantizer/...86.exe

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    quantizer.zip

  • Size

    13.3MB

  • Sample

    240125-ms1amseba2

  • MD5

    76109d792ddffe40ec519458e160cbf5

  • SHA1

    fe683adf6848a132d18accbbcfa2ec2066db1e98

  • SHA256

    0388ddf8892839e802c4a9ba5c3bfba457805f8a17123afe4a9780659e3a8360

  • SHA512

    11ac65357886f63b88c3bcdcf2c899e2e3b306066eb28074250f48b8c25a5f252922227a594fd505a2777dd541ace47ae3541de6c68b7677d60aefebf4e5d731

  • SSDEEP

    393216:aoTpGfuz0d74M1P7J0Asma9xCBRquvPcOo0Pk:JpGtN4M1P7JQmQxONcL0Pk

Score
7/10
discovery

Malware Config

Targets

    • Target

      quantizer/quantizer.exe

    • Size

      212KB

    • MD5

      1458480cf8803569195f934d47ac7481

    • SHA1

      e82b5cbf643075a44049aa97ba045795da25ab55

    • SHA256

      68d528f9ac891e920449188198a233b71b2860838af4fb970b9966f941ce82ca

    • SHA512

      168466da32f952df6bae568e75bb683bc6e009880b67d28acc0f3b8fb6e88b186abbeeabf0a87bf9a01f47362c157f46277682d9a3e2bdab90f8f2f2775f7e04

    • SSDEEP

      1536:Ra2jqHhCCjLFUkH8neWP4xqunYlFjTZgjq9qlQJ1veZ2eDg4X:RLjqHhCWcn5BYYfjTZgjq9BT2Z2eDP

    Score
    1/10
    behavioral1

    • Target

      quantizer/vc_redist.x86.exe

    • Size

      13.5MB

    • MD5

      7f5d52f979b732954e87c53dc9720fc0

    • SHA1

      e99e5b17b0ad882833bbdc8cf798dc56f9947a5e

    • SHA256

      ea92c3f93bc063d6da084faa854c131e37f1f2cb585cd1e62a3df9e03eacadff

    • SHA512

      7104b2519c9b0edd4db9b6caf7ad1e4586be6bc64144048df747ff9625196397c249ca1e51562a24e68da863a05c7e0893ed54fd52fb117f60d05bb8b834d512

    • SSDEEP

      393216:gElp+dkBSuF2SfUfn66UyCbr2942cV52S4c9n:9p+Ty2SfUfnsywr0K2tc9n

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks