Overview

overview

7

Static

static

1

URLScan

urlscan

1

https://qsearch.io/i...

ubuntu-18.04-amd64

7

https://qsearch.io/i...

debian-9-armhf

https://qsearch.io/i...

debian-9-mips

https://qsearch.io/i...

debian-9-mipsel

Resubmissions

22-02-2024 02:40

240222-c51rtsbc58 7

22-02-2024 02:22

240222-ctqgqaad9v 7

22-02-2024 02:21

240222-cs1ajaad8w 1

22-02-2024 02:18

240222-crhn4aad6z 1

22-02-2024 02:17

240222-cqrwdaad51 1

22-02-2024 02:15

240222-cptctaah68 1

22-02-2024 02:13

240222-cnv51sad4t 1

22-02-2024 02:11

240222-cmr2zaad3x 1

22-02-2024 02:11

240222-cmaspaad3t 1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://qsearch.io/index.php?rgid=895053&sub=gclid&gclid=CjwKCAiArLyuBhA7EiwA-qo80Fl0vnsy2OHsUXJJGYnKG_j2lxNW8Qn-qg0DZho6zscM5vaEKYSkDhoCYOwQAvD_BwE - Google Search

  • Sample

    240222-ctqgqaad9v

Score
7/10
antivmlinuxspywarestealer

Malware Config

Targets

    • Target

      https://qsearch.io/index.php?rgid=895053&sub=gclid&gclid=CjwKCAiArLyuBhA7EiwA-qo80Fl0vnsy2OHsUXJJGYnKG_j2lxNW8Qn-qg0DZho6zscM5vaEKYSkDhoCYOwQAvD_BwE - Google Search

    Score
    7/10
    antivmspywarestealer

    • Changes its process name

    • Reads user data of web browsers

      Reads stored browser data which can include saved credentials.

      spywarestealer

    • Checks CPU configuration

      Checks CPU information which indicate if the system is a virtual machine.

      antivm

    • Reads CPU attributes

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks