Overview

overview

10

Static

static

3

Trojan-Pro...rt.exe

windows7-x64

10

Trojan-Pro...rt.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Trojan-Proxy.Win32.Qukart.vih-6d9bd23eb2f85573cb919d3921e1d6341c3f4a2c1bd2b158664520123d543912

  • Size

    96KB

  • Sample

    240229-lhzqpada84

  • MD5

    17b14ff5b435817a87b03c937c19c1f3

  • SHA1

    09f28a4c5993cde8e3a765f71e10f02b5ff76361

  • SHA256

    6d9bd23eb2f85573cb919d3921e1d6341c3f4a2c1bd2b158664520123d543912

  • SHA512

    21fc64b8b346a58d302537a8acf7aeacf4fc3eb47c2f5e897ba5a0932ee12d69afd3106800e06a913103c36e5d9445fbc85d7640b8c876dbdfacbfc5e15d6262

  • SSDEEP

    1536:5zV5ld2FNTklhioPhBTu2L447RZObZUUWaegPYA:51CTklhioZFzNClUUWae

Score
10/10
persistence

Malware Config

Targets

    • Target

      Trojan-Proxy.Win32.Qukart.vih-6d9bd23eb2f85573cb919d3921e1d6341c3f4a2c1bd2b158664520123d543912

    • Size

      96KB

    • MD5

      17b14ff5b435817a87b03c937c19c1f3

    • SHA1

      09f28a4c5993cde8e3a765f71e10f02b5ff76361

    • SHA256

      6d9bd23eb2f85573cb919d3921e1d6341c3f4a2c1bd2b158664520123d543912

    • SHA512

      21fc64b8b346a58d302537a8acf7aeacf4fc3eb47c2f5e897ba5a0932ee12d69afd3106800e06a913103c36e5d9445fbc85d7640b8c876dbdfacbfc5e15d6262

    • SSDEEP

      1536:5zV5ld2FNTklhioPhBTu2L447RZObZUUWaegPYA:51CTklhioZFzNClUUWae

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks