Overview

overview

10

Static

static

10

Trojan-Pro...rt.exe

windows7-x64

10

Trojan-Pro...rt.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Trojan-Proxy.Win32.Qukart.vih-d24b88692a2d023bb729972dc531812e7fff30a0dd24fa2e841cd8bb1e1332ee

  • Size

    176KB

  • Sample

    240229-ln8wjsdd59

  • MD5

    4366fd4504d0331337e64fc919376b50

  • SHA1

    ac80eedc1f8ac02b37a3534b86cf8c0510a94643

  • SHA256

    d24b88692a2d023bb729972dc531812e7fff30a0dd24fa2e841cd8bb1e1332ee

  • SHA512

    22b4d5c8a79b62e860790ffdf5db1f60ec1ce8ccf4a91e9ba8c9093d6ab96757117fc55ebb67b128f5ef2273b3951af4a0791296f2a1f8d3828640cf7f6b138e

  • SSDEEP

    3072:CaH6+c8uKiOIVyErD4karlOGA8d2E2fAYjmjRrz3E3:CowGiOxqskRXE2fAEG4

Score
10/10
persistence

Malware Config

Targets

    • Target

      Trojan-Proxy.Win32.Qukart.vih-d24b88692a2d023bb729972dc531812e7fff30a0dd24fa2e841cd8bb1e1332ee

    • Size

      176KB

    • MD5

      4366fd4504d0331337e64fc919376b50

    • SHA1

      ac80eedc1f8ac02b37a3534b86cf8c0510a94643

    • SHA256

      d24b88692a2d023bb729972dc531812e7fff30a0dd24fa2e841cd8bb1e1332ee

    • SHA512

      22b4d5c8a79b62e860790ffdf5db1f60ec1ce8ccf4a91e9ba8c9093d6ab96757117fc55ebb67b128f5ef2273b3951af4a0791296f2a1f8d3828640cf7f6b138e

    • SSDEEP

      3072:CaH6+c8uKiOIVyErD4karlOGA8d2E2fAYjmjRrz3E3:CowGiOxqskRXE2fAEG4

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks