4969529f962c7cbbb1c368b92dd2f99131c3ad6e5a12919b8aee8b47c92beacf

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
29/03/2024, 11:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
QDeskSetup1.1.1.6.exe
Size 10.1MB
Sample240329-nzkdfagg89
SHA256 4969529f962c7cbbb1c368b92dd2f99131c3ad6e5a12919b8aee8b47c92beacf
MD5 413fd3e1d20e10b93ceb366b51bf6f53
SHA1 e8a7d0c2ad2b4f923b56edecb547304f433eda07
SHA512 9b90b7ff03decc5154cc8e07a40e0d7f73fe7e110809550957d3fc841526c62a6ca785c417ae717e9cad7ebd3cc96fbb96d304933fc5b79b26c71e27f85081fd
SSDEEP 196608:FC6Dc8zspBYxPYvYWAi19y5bx+ys/4OLQAFzTk9xRCk2KINKwXOIdpyVJ6:Fvzsp3vYm85b8yslZTcF8tXkI
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
2440	QDeskSetup1.1.1.6.exe
2440	QDeskSetup1.1.1.6.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\QDeskSetup1.1.1.6.exe
"C:\Users\Admin\AppData\Local\Temp\QDeskSetup1.1.1.6.exe"
1⤵
- Loads dropped DLL
PID:2440

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsd353B.tmp\InstallOptions.dll
Size 14KB
SHA256 0e014352b64abc431d97460d79757cbafbf6ba997c08b608c294e1f582af269a
MD5 20f3184efe7edddfef3325efc25d12a5
SHA1 8db4c500d73f9525a7e9834df6caea2e70189939
SHA512 433188957a4603c9c61ec698a720021aacf61f46ccc32d5a11bcb6f2d0b1f01e5680635707d8a0ec7a9ef2aa2a85d6dec07ded452e4cb9e280062c0bed555c1a
SSDEEP 192:v4n3T5aK+dHCMR1aQR9RuZl3WWmU7WYZsw1JpVGnrjWK72dwF7dBOne:wn3T5KdHCMRD/R1cOnrjW+BO
MD5 SHA1 SHA512 SSDEEP

Submit Download

LangDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsd353B.tmp\LangDLL.dll
Size 5KB
SHA256 4e72c8b4d36f128b25281440e59e39af7ec2080d02e024f35ac413d769d91f39
MD5 ea60c7bd5edd6048601729bd31362c16
SHA1 6e6919d969eb61a141595014395b6c3f44139073
SHA512 f9dc35220697153bb06e3a06caf645079881cb75aed008dbe5381ecaf3442d5be03500b36bbca8b3d114845fac3d667ddf4063c16bc35d29bbea862930939993
SSDEEP 48:im1nEhqneMPUptuMMNvimk2BAZuMTRCpYEvJdUJvR0J6of5dwe:F1jpl9NLBAZuYtR0xd
MD5 SHA1 SHA512 SSDEEP

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsd353B.tmp\ioSpecial.ini
Size 706B
SHA256 0a0ee32b3af2889e4d816beb7f1d98a59abe4ab1c277070a3eb58dc5df10ee61
MD5 8fd716fc4384c1112b642c0f6b35c30e
SHA1 0babb40893cddafe9d6ba0bad99461631e445e29
SHA512 2bd2efb1ab5410b64228c3fec73d7ea9ed1d97871d17eea5164e962fe2e6f7143560bc601a1957018ac5c4c494c7dadd6e696a335b289919ab7a3f8e329eb177
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads