Overview
overview
8Static
static
3QDeskSetup1.1.1.6.exe
windows7-x64
7QDeskSetup1.1.1.6.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3D3DCompiler_43.dll
windows7-x64
1D3DCompiler_43.dll
windows10-2004-x64
1D3DX9_43.dll
windows7-x64
1D3DX9_43.dll
windows10-2004-x64
1VMProtectSDK64.dll
windows7-x64
1VMProtectSDK64.dll
windows10-2004-x64
1avcodec-58.dll
windows7-x64
1avcodec-58.dll
windows10-2004-x64
1avdevice-58.dll
windows7-x64
1avdevice-58.dll
windows10-2004-x64
1avfilter-7.dll
windows7-x64
1avfilter-7.dll
windows10-2004-x64
1avformat-58.dll
windows7-x64
1avformat-58.dll
windows10-2004-x64
1avutil-56.dll
windows7-x64
1avutil-56.dll
windows10-2004-x64
1breakpad.dll
windows7-x64
1breakpad.dll
windows10-2004-x64
1d3dx11_43.dll
windows7-x64
1d3dx11_43.dll
windows10-2004-x64
1driver/devcon.exe
windows10-2004-x64
1driver/idd...dd.dll
windows10-2004-x64
1driver/install.bat
windows7-x64
1driver/install.bat
windows10-2004-x64
8Analysis
- max time kernel
136s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
29/03/2024, 11:50
Static task
static1
Behavioral task
behavioral1
Sample
QDeskSetup1.1.1.6.exe
Resource
win7-20240319-en
windows7-x64
Behavioral task
behavioral2
Sample
QDeskSetup1.1.1.6.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
D3DCompiler_43.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral10
Sample
D3DCompiler_43.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
D3DX9_43.dll
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral12
Sample
D3DX9_43.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
VMProtectSDK64.dll
Resource
win7-20240220-en
windows7-x64
Behavioral task
behavioral14
Sample
VMProtectSDK64.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
avcodec-58.dll
Resource
win7-20240319-en
windows7-x64
Behavioral task
behavioral16
Sample
avcodec-58.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
avdevice-58.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral18
Sample
avdevice-58.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
avfilter-7.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral20
Sample
avfilter-7.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
avformat-58.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral22
Sample
avformat-58.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
avutil-56.dll
Resource
win7-20240220-en
windows7-x64
Behavioral task
behavioral24
Sample
avutil-56.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
breakpad.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral26
Sample
breakpad.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
d3dx11_43.dll
Resource
win7-20240319-en
windows7-x64
Behavioral task
behavioral28
Sample
d3dx11_43.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
driver/devcon.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
driver/idd/qdeskidd.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
driver/install.bat
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral32
Sample
driver/install.bat
Resource
win10v2004-20240226-en
windows10-2004-x64
General
- Target avdevice-58.dll
- Size 742KB
- Sample240329-nzkdfagg89
- SHA256 28ab8d61b11fd59d4140bbf840c2c6d122849c659fbfd55a94591ffac93e1820
- MD5 249609ca649419f2bff0bd551f8f4307
- SHA1 7a10c99216ef7ad0a726cb5d987fb94a5fd68cd9
- SHA512 5ca215f007803c7b76fb1c59ba605be7b178349451ba1e85cf04189b69f82b70ae9ea6a3d904a574fe6c89228fc3ec4a4c411b77f578ee9a3e56f4f7481e002b
- SSDEEP 12288:Ot+jc50Dcgc0uqCfktrocWGueTp8HWqdIKDGMB8HPPf1Hvkg:OscRKMUvph
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\avdevice-58.dll,#11⤵PID:2564
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3996 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:81⤵PID:4876