Overview

overview

7

Static

static

3

8c8d2d08fa...f6.exe

windows7-x64

7

8c8d2d08fa...f6.exe

windows10-2004-x64

7

$0/questurl.dll

windows7-x64

1

$0/questurl.dll

windows10-2004-x64

1

$0/questurl.exe

windows7-x64

3

$0/questurl.exe

windows10-2004-x64

3

$0/uninstall.exe

windows7-x64

7

$0/uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    8c8d2d08fa837333a2da2fd25849b5f6

  • Size

    699KB

  • Sample

    240203-rqf67sdhal

  • MD5

    8c8d2d08fa837333a2da2fd25849b5f6

  • SHA1

    65fbb72ce7a28ed9cf683b708c65da070da5f596

  • SHA256

    1fedff1795f8f9c1af94b0151f87fab089681d7d86412648b41e2f58f378f5fc

  • SHA512

    bef02c30ff9c93ab1e1f00631a040121f585628b67ae7c82e9cdc9e3a60244230596404b170e0c14ddd538852e36b508690221501e8b10184a6379a589e07f88

  • SSDEEP

    12288:pp3PFYyt2AcXCTKukOB0fhRW6I5hmOvDqVxeDaOxjsMJngpC5Tw5JWu:pZFYytbcXqp90fqqOvGzefOMJgWTWn

Score
7/10

Malware Config

Targets

    • Target

      8c8d2d08fa837333a2da2fd25849b5f6

    • Size

      699KB

    • MD5

      8c8d2d08fa837333a2da2fd25849b5f6

    • SHA1

      65fbb72ce7a28ed9cf683b708c65da070da5f596

    • SHA256

      1fedff1795f8f9c1af94b0151f87fab089681d7d86412648b41e2f58f378f5fc

    • SHA512

      bef02c30ff9c93ab1e1f00631a040121f585628b67ae7c82e9cdc9e3a60244230596404b170e0c14ddd538852e36b508690221501e8b10184a6379a589e07f88

    • SSDEEP

      12288:pp3PFYyt2AcXCTKukOB0fhRW6I5hmOvDqVxeDaOxjsMJngpC5Tw5JWu:pZFYytbcXqp90fqqOvGzefOMJgWTWn

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $0/questurl.dll

    • Size

      576KB

    • MD5

      0eda21d60c44d88867416f8174f5cec0

    • SHA1

      83fdbb5c3d09fe43af4e9b8f666d59929da77f71

    • SHA256

      ec3b0eaceaa9cd4eaac77e70c4c5762cf12d440406842c40b86a23b2ea45333d

    • SHA512

      9033a83afc991c568bbc4ff7a362ee6146e1fae8865114a74f1399af36f2594b422ef0eba86eb106a200fb440c773f08d1dca394ddd22b6cdd120c82fc11018e

    • SSDEEP

      12288:nFDXngYlmJUUvRcxk0EFOdKAJ5I9ZXvbyg3p3kqdp0eRZIdb6b:Fbx4hak0EFOhIT+g3p33Ru+b

    Score
    1/10
    behavioral3behavioral4

    • Target

      $0/questurl.exe

    • Size

      25KB

    • MD5

      1ab80da994439df7b643bf77df7bcbf9

    • SHA1

      2cc72151d824bf400c23bccc6cff0bd9fefc5680

    • SHA256

      f6df00973243773c3dc7ed989be626963129b4b87c8bcf97a979e434f75c20f8

    • SHA512

      4731011ae4736aff6ad29210659b1be2c799d4342ae32cc289ca17448e94f133d24991abb16bc53b36b27f883fd7ec657471ffae4bfec145887cd2c0c0bdd385

    • SSDEEP

      768:AS2X9KcYRiTYIFXja9DpjOQcnvRBa1BalS:AS2X9KcYRbIFXjIDEQcv3zlS

    Score
    3/10
    behavioral5behavioral6

    • Target

      $0/uninstall.exe

    • Size

      78KB

    • MD5

      19099932898c289bf09493f922d95be2

    • SHA1

      676bc5eace4bdf2d0b9f58759132fe19f6e189d4

    • SHA256

      8cb7b08bc69afdabf4d686408303ba2b8dea9f9972c4f2f8aa95447d0a9cc4ca

    • SHA512

      bc732e4330b9118067da5b2d0de79566d2648b7c93a9284a8bbd8c98254d0b7f5bbb95a1ad0965bdc8059c97db59fdcabdd0a82d7863a718a7434e1abcada7ae

    • SSDEEP

      1536:PEkjY1zy214Qay0DGkJ7qAELVigJHPcpVPVwfdEOk2/DG:8kjAJ4dDGkJ+AI0UENwf2U/S

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral7behavioral8

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      13KB

    • MD5

      d765c492c21689e3d9d61634371fd861

    • SHA1

      ac200933671ae52c9d5544d0e2e8e9144d286c83

    • SHA256

      551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc

    • SHA512

      9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f

    • SSDEEP

      192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      fe24766ba314f620d57d0cf7339103c0

    • SHA1

      8641545f03f03ff07485d6ec4d7b41cbb898c269

    • SHA256

      802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd

    • SHA512

      60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3

    • SSDEEP

      192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      13KB

    • MD5

      d765c492c21689e3d9d61634371fd861

    • SHA1

      ac200933671ae52c9d5544d0e2e8e9144d286c83

    • SHA256

      551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc

    • SHA512

      9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f

    • SSDEEP

      192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      fe24766ba314f620d57d0cf7339103c0

    • SHA1

      8641545f03f03ff07485d6ec4d7b41cbb898c269

    • SHA256

      802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd

    • SHA512

      60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3

    • SSDEEP

      192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB

    Score
    3/10
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks