Overview

overview

10

Static

static

3

Trojan-Pro...rt.exe

windows7-x64

10

Trojan-Pro...rt.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Trojan-Proxy.Win32.Qukart.gen-fa61f7dca683809df63ba093ab731e7a5b7a6d7f0b1a4c68d9bc0f6df1439c96

  • Size

    1.2MB

  • Sample

    240229-ldevqach47

  • MD5

    22d038931d80e870dd47ef99fb30b3a2

  • SHA1

    e3aeebf9ba6c613e06bd4169f0645d5778f7d5aa

  • SHA256

    fa61f7dca683809df63ba093ab731e7a5b7a6d7f0b1a4c68d9bc0f6df1439c96

  • SHA512

    fe72a4bcd54226499721b3d7b56ab2fbad3d44bdcaf51407073da00e13b9530b69951b7147ea91487b99530541992b73ab48137606a52d6190d3e6fb7001cc82

  • SSDEEP

    24576:5KvHPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHR:5KvXbazR0vKLXZR

Score
10/10
persistence

Malware Config

Targets

    • Target

      Trojan-Proxy.Win32.Qukart.gen-fa61f7dca683809df63ba093ab731e7a5b7a6d7f0b1a4c68d9bc0f6df1439c96

    • Size

      1.2MB

    • MD5

      22d038931d80e870dd47ef99fb30b3a2

    • SHA1

      e3aeebf9ba6c613e06bd4169f0645d5778f7d5aa

    • SHA256

      fa61f7dca683809df63ba093ab731e7a5b7a6d7f0b1a4c68d9bc0f6df1439c96

    • SHA512

      fe72a4bcd54226499721b3d7b56ab2fbad3d44bdcaf51407073da00e13b9530b69951b7147ea91487b99530541992b73ab48137606a52d6190d3e6fb7001cc82

    • SSDEEP

      24576:5KvHPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHR:5KvXbazR0vKLXZR

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks