Overview

overview

10

Static

static

3

Trojan-Pro...rt.exe

windows7-x64

10

Trojan-Pro...rt.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Trojan-Proxy.Win32.Qukart.vij-9ffc04be631cac62e2c6f8ee1ce92e24b6140dcd4d986d6af2e11f0466bfce25

  • Size

    400KB

  • Sample

    240229-lv927adb7x

  • MD5

    d87611b4c78484128ea52c04410a4c7c

  • SHA1

    a158c879bc0bb54d0a870281197ebb9518ba4a12

  • SHA256

    9ffc04be631cac62e2c6f8ee1ce92e24b6140dcd4d986d6af2e11f0466bfce25

  • SHA512

    12cf2f4828e735ddd065271f06dd57ed08db43b1eaae1ef132e14bac455bcbc929517cf9b36a5fc1dd94198e53952923611add7264408dadd21e40b06dc66de7

  • SSDEEP

    6144:7XBuH1DvlrZV4U/vlfl+9DvlEZV4U/vlf0DrBqvl8ZV4U/vlfEc48hvlxZV1:tu1Dv36IvYvc6IveDVqvQ6Ivq8hvV/

Score
10/10
persistence

Malware Config

Targets

    • Target

      Trojan-Proxy.Win32.Qukart.vij-9ffc04be631cac62e2c6f8ee1ce92e24b6140dcd4d986d6af2e11f0466bfce25

    • Size

      400KB

    • MD5

      d87611b4c78484128ea52c04410a4c7c

    • SHA1

      a158c879bc0bb54d0a870281197ebb9518ba4a12

    • SHA256

      9ffc04be631cac62e2c6f8ee1ce92e24b6140dcd4d986d6af2e11f0466bfce25

    • SHA512

      12cf2f4828e735ddd065271f06dd57ed08db43b1eaae1ef132e14bac455bcbc929517cf9b36a5fc1dd94198e53952923611add7264408dadd21e40b06dc66de7

    • SSDEEP

      6144:7XBuH1DvlrZV4U/vlfl+9DvlEZV4U/vlf0DrBqvl8ZV4U/vlfEc48hvlxZV1:tu1Dv36IvYvc6IveDVqvQ6Ivq8hvV/

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks