General

  • Target

    i42qt

  • Size

    18KB

  • Sample

    240523-ct965aad6y

  • MD5

    ca45f3cc48e08cba6ae573e9bc4e9a6e

  • SHA1

    7275ddbbe1d1ec0248f4cd97c2c3732521b98a29

  • SHA256

    50f87269f0dba084992141fbe63b9f7ce0c23206925637d6a68adf2f56fd5d5e

  • SHA512

    458ef4ca11944f01efa1d3b713e3269cf109c56a397a0a98e95990a5f55952f794a9b55485dbb7a2fbb0b5c2aafbac92a236a94808e85d2885d4cddfb6d9a9ca

  • SSDEEP

    192:zwF92JICf98Ftf2I0pLI0pdhgf98Ftf5JKPF5iRj/K1ljQ+mHDsiHiMi6ieFM:zwF9pFWhNFqiF0ljnYIiHiMi6iyM

Score
8/10

Malware Config

Targets

    • Target

      i42qt

    • Size

      18KB

    • MD5

      ca45f3cc48e08cba6ae573e9bc4e9a6e

    • SHA1

      7275ddbbe1d1ec0248f4cd97c2c3732521b98a29

    • SHA256

      50f87269f0dba084992141fbe63b9f7ce0c23206925637d6a68adf2f56fd5d5e

    • SHA512

      458ef4ca11944f01efa1d3b713e3269cf109c56a397a0a98e95990a5f55952f794a9b55485dbb7a2fbb0b5c2aafbac92a236a94808e85d2885d4cddfb6d9a9ca

    • SSDEEP

      192:zwF92JICf98Ftf2I0pLI0pdhgf98Ftf5JKPF5iRj/K1ljQ+mHDsiHiMi6ieFM:zwF9pFWhNFqiF0ljnYIiHiMi6iyM

    Score
    8/10
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

3
T1112

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Discovery

Software Discovery

1
T1518

Security Software Discovery

1
T1518.001

Query Registry

2
T1012

System Information Discovery

1
T1082

Process Discovery

1
T1057

Tasks